alchemy_cms 5.2.1 → 6.0.0.pre.b4

data/app/models/alchemy/essence_richtext.rb

@@ -17,6 +17,7 @@ module Alchemy
     acts_as_essence preview_text_column: "stripped_body"
 
     before_save :strip_content
+    before_save :sanitize_content
 
     def has_tinymce?
       true
@@ -27,5 +28,16 @@ module Alchemy
     def strip_content
       self.stripped_body = Rails::Html::FullSanitizer.new.sanitize(body)
     end
+
+    def sanitize_content
+      self.sanitized_body = Rails::Html::SafeListSanitizer.new.sanitize(
+        body,
+        content_sanitizer_settings
+      )
+    end
+
+    def content_sanitizer_settings
+      content&.settings&.fetch(:sanitizer, {}) || {}
+    end
   end
 end

data/app/models/alchemy/essence_video.rb

@@ -0,0 +1,12 @@
+# frozen_string_literal: true
+
+module Alchemy
+  class EssenceVideo < ActiveRecord::Base
+    acts_as_essence(
+      ingredient_column: :attachment,
+      preview_text_method: :name,
+    )
+
+    belongs_to :attachment, optional: true
+  end
+end

data/app/models/alchemy/image_cropper_settings.rb

@@ -0,0 +1,87 @@
+# frozen_string_literal: true
+
+module Alchemy
+  # Settings for the graphical JS image cropper
+  class ImageCropperSettings
+    attr_reader :render_size, :default_crop_from, :default_crop_size, :fixed_ratio, :image_width, :image_height
+
+    def initialize(render_size:, default_crop_from:, default_crop_size:, fixed_ratio:, image_width:, image_height:)
+      @render_size = render_size || [0, 0]
+      @fixed_ratio = fixed_ratio
+      @image_width = image_width.to_i
+      @image_height = image_height.to_i
+      @default_crop_from = default_crop_from || [0, 0]
+      @default_crop_size = default_crop_size || [@image_width, @image_height]
+    end
+
+    def to_h
+      return {} if image_width.zero? || image_height.zero?
+
+      {
+        min_size: large_enough? ? min_size : false,
+        ratio: ratio,
+        default_box: default_box,
+        image_size: [image_width, image_height],
+      }.freeze
+    end
+
+    def [](key)
+      to_h[key]
+    end
+
+    private
+
+    def ratio
+      return false if fixed_ratio == false
+      return ratio_from_size if fixed_ratio.nil?
+
+      Float(fixed_ratio)
+    end
+
+    # Only returns an array of width and height if image is large enough
+    # or false to disable min size option of the image cropper
+    def large_enough?
+      return true if render_size.any?(&:zero?)
+
+      image_width >= render_size[0] && image_height >= render_size[1]
+    end
+
+    # Infers the aspect ratio from size or fixed_ratio. If you don't want a fixed
+    # aspect ratio, don't specify a size or only width or height.
+    #
+    def ratio_from_size
+      if render_size.none?(&:zero?)
+        render_size[0].to_f / render_size[1]
+      elsif [image_width, image_height].none?(&:zero?)
+        image_width.to_f / image_height
+      else
+        false
+      end
+    end
+
+    # Infers the minimum width or height
+    # if the aspect ratio and one dimension is specified.
+    #
+    def min_size
+      return render_size unless ratio
+
+      if render_size[1].zero?
+        [render_size[0], (render_size[0] / ratio).to_i]
+      else
+        [(render_size[1] * ratio).to_i, render_size[1]]
+      end
+    end
+
+    # Given a point and a mask, this function returns the area on the
+    # underlying canvas as a Hash of two points
+    #
+    def default_box
+      [
+        default_crop_from[0],
+        default_crop_from[1],
+        default_crop_from[0] + default_crop_size[0],
+        default_crop_from[1] + default_crop_size[1],
+      ]
+    end
+  end
+end

data/app/models/alchemy/ingredient.rb

@@ -0,0 +1,183 @@
+# frozen_string_literal: true
+
+module Alchemy
+  class Ingredient < BaseRecord
+    class DefinitionError < StandardError; end
+
+    include Hints
+
+    self.table_name = "alchemy_ingredients"
+
+    belongs_to :element, touch: true, class_name: "Alchemy::Element", inverse_of: :ingredients
+    belongs_to :related_object, polymorphic: true, optional: true
+
+    before_validation(on: :create) { self.value ||= default_value }
+
+    validates :type, presence: true
+    validates :role, presence: true
+
+    validates_with Alchemy::IngredientValidator, on: :update, if: :has_validations?
+
+    scope :audios, -> { where(type: "Alchemy::Ingredients::Audio") }
+    scope :booleans, -> { where(type: "Alchemy::Ingredients::Boolean") }
+    scope :datetimes, -> { where(type: "Alchemy::Ingredients::Datetime") }
+    scope :files, -> { where(type: "Alchemy::Ingredients::File") }
+    scope :headlines, -> { where(type: "Alchemy::Ingredients::Headline") }
+    scope :htmls, -> { where(type: "Alchemy::Ingredients::Html") }
+    scope :links, -> { where(type: "Alchemy::Ingredients::Link") }
+    scope :nodes, -> { where(type: "Alchemy::Ingredients::Node") }
+    scope :pages, -> { where(type: "Alchemy::Ingredients::Page") }
+    scope :pictures, -> { where(type: "Alchemy::Ingredients::Picture") }
+    scope :richtexts, -> { where(type: "Alchemy::Ingredients::Richtext") }
+    scope :selects, -> { where(type: "Alchemy::Ingredients::Select") }
+    scope :texts, -> { where(type: "Alchemy::Ingredients::Text") }
+    scope :videos, -> { where(type: "Alchemy::Ingredients::Video") }
+
+    class << self
+      # Defines getter and setter method aliases for related object
+      #
+      # @param [String|Symbol] The name of the alias
+      # @param [String] The class name of the related object
+      def related_object_alias(name, class_name:)
+        alias_method name, :related_object
+        alias_method "#{name}=", :related_object=
+
+        # Somehow Rails STI does not allow us to use `alias_method` for the related_object_id
+        define_method "#{name}_id" do
+          related_object_id
+        end
+
+        define_method "#{name}_id=" do |id|
+          self.related_object_id = id
+          self.related_object_type = class_name
+        end
+      end
+
+      # Modulize ingredient type
+      #
+      # Makes sure the passed ingredient type is in the +Alchemy::Ingredients+
+      # module namespace.
+      #
+      # If you add custom ingredient class,
+      # put them in the +Alchemy::Ingredients+ module namespace
+      # @param [String] Ingredient class name
+      # @return [String]
+      def normalize_type(ingredient_type)
+        "Alchemy::Ingredients::#{ingredient_type.to_s.classify.demodulize}"
+      end
+
+      def translated_label_for(role, element_name = nil)
+        Alchemy.t(
+          role,
+          scope: "ingredient_roles.#{element_name}",
+          default: Alchemy.t("ingredient_roles.#{role}", default: role.humanize),
+        )
+      end
+    end
+
+    # Compatibility method for access from element
+    def essence
+      self
+    end
+
+    # The value or the related object if present
+    def value
+      related_object || self[:value]
+    end
+
+    # Settings for this ingredient from the +elements.yml+ definition.
+    def settings
+      definition[:settings] || {}
+    end
+
+    # Fetches value from settings
+    #
+    # @param key [Symbol]               - The hash key you want to fetch the value from
+    # @param options [Hash]             - An optional Hash that can override the settings.
+    #                                     Normally passed as options hash into the content
+    #                                     editor view.
+    def settings_value(key, options = {})
+      settings.merge(options || {})[key.to_sym]
+    end
+
+    # Definition hash for this ingredient from +elements.yml+ file.
+    #
+    def definition
+      return {} unless element
+
+      element.ingredient_definition_for(role) || {}
+    end
+
+    # The first 30 characters of the value
+    #
+    # Used by the Element#preview_text method.
+    #
+    # @param [Integer] max_length (30)
+    #
+    def preview_text(maxlength = 30)
+      value.to_s[0..maxlength - 1]
+    end
+
+    # Cross DB adapter data accessor that works
+    def data
+      @_data ||= (self[:data] || {}).with_indifferent_access
+    end
+
+    # The path to the view partial of the ingredient
+    # @return [String]
+    def to_partial_path
+      "alchemy/ingredients/#{partial_name}_view"
+    end
+
+    # The demodulized underscored class name of the ingredient
+    # @return [String]
+    def partial_name
+      self.class.name.demodulize.underscore
+    end
+
+    # @return [Boolean]
+    def has_validations?
+      !!definition[:validate]
+    end
+
+    # @return [Boolean]
+    def has_hint?
+      !!definition[:hint]
+    end
+
+    # @return [Boolean]
+    def deprecated?
+      !!definition[:deprecated]
+    end
+
+    # @return [Boolean]
+    def has_tinymce?
+      false
+    end
+
+    # @return [Boolean]
+    def preview_ingredient?
+      !!definition[:as_element_title]
+    end
+
+    private
+
+    def hint_translation_attribute
+      role
+    end
+
+    # Returns the default value from ingredient definition
+    #
+    # If the value is a symbol it gets passed through i18n
+    # inside the +alchemy.default_ingredient_texts+ scope
+    def default_value
+      default = definition[:default]
+      case default
+      when Symbol
+        Alchemy.t(default, scope: :default_ingredient_texts)
+      else
+        default
+      end
+    end
+  end
+end

data/app/models/alchemy/ingredient_validator.rb

@@ -0,0 +1,97 @@
+# frozen_string_literal: true
+
+module Alchemy
+  # Ingredient Validations:
+  #
+  # Ingredient validations can be set inside the +config/elements.yml+ file.
+  #
+  # Supported validations are:
+  #
+  # * presence
+  # * uniqueness
+  # * format
+  #
+  # *) format needs to come with a regex or a predefined matcher string as its value.
+  #
+  # There are already predefined format matchers listed in the +config/alchemy/config.yml+ file.
+  # It is also possible to add own format matchers there.
+  #
+  # Example of format matchers in +config/alchemy/config.yml+:
+  #
+  # format_matchers:
+  #   email: !ruby/regexp '/\A[^@\s]+@([^@\s]+\.)+[^@\s]+\z/'
+  #   url:   !ruby/regexp '/\A[a-z0-9]+([\-\.]{1}[a-z0-9]+)*\.[a-z]{2,5}(:[0-9]{1,5})?(\/.*)?\z/ix'
+  #   ssl:   !ruby/regexp '/https:\/\/[\S]+/'
+  #
+  # Example of an element definition with ingredient validations:
+  #
+  #   - name: person
+  #     ingredients:
+  #     - role: name
+  #       type: Text
+  #       validate: [presence]
+  #     - role: email
+  #       type: Text
+  #       validate: [format: 'email']
+  #     - role: homepage
+  #       type: Text
+  #       validate: [format: !ruby/regexp '^[a-z0-9]+([\-\.]{1}[a-z0-9]+)*\.[a-z]{2,5}(:[0-9]{1,5})?(\/.*)?$']
+  #
+  # Example of an element definition with chained validations.
+  #
+  #   - name: person
+  #     ingredients:
+  #     - role: name
+  #       type: Text
+  #       validate: [presence, uniqueness, format: 'name']
+  #
+  class IngredientValidator < ActiveModel::Validator
+    def validate(ingredient)
+      @ingredient = ingredient
+      validations.each do |validation|
+        if validation.respond_to?(:keys)
+          validation.map do |key, value|
+            send("validate_#{key}", value)
+          end
+        else
+          send("validate_#{validation}")
+        end
+      end
+    end
+
+    private
+
+    attr_reader :ingredient
+
+    def validations
+      ingredient.definition.fetch(:validate, [])
+    end
+
+    def validate_presence(*)
+      if ingredient.value.blank?
+        ingredient.errors.add(:value, :blank)
+      end
+    end
+
+    def validate_uniqueness(*)
+      if duplicates.any?
+        ingredient.errors.add(:value, :taken)
+      end
+    end
+
+    def validate_format(format)
+      matcher = Alchemy::Config.get("format_matchers")[format] || format
+      if !ingredient.value.to_s.match?(Regexp.new(matcher))
+        ingredient.errors.add(:value, :invalid)
+      end
+    end
+
+    def duplicates
+      ingredient.class
+        .joins(:element).merge(Alchemy::Element.available)
+        .where(Alchemy::Element.table_name => { name: ingredient.element.name })
+        .where(value: ingredient.value)
+        .where.not(id: ingredient.id)
+    end
+  end
+end

data/app/models/alchemy/ingredients/audio.rb

@@ -0,0 +1,29 @@
+# frozen_string_literal: true
+
+module Alchemy
+  module Ingredients
+    # A audio attachment
+    #
+    class Audio < Alchemy::Ingredient
+      store_accessor :data,
+        :autoplay,
+        :controls,
+        :muted,
+        :loop
+
+      related_object_alias :attachment, class_name: "Alchemy::Attachment"
+
+      delegate :name, to: :attachment, allow_nil: true
+
+      # The first 30 characters of the attachments name
+      #
+      # Used by the Element#preview_text method.
+      #
+      # @param [Integer] max_length (30)
+      #
+      def preview_text(max_length = 30)
+        name.to_s[0..max_length - 1]
+      end
+    end
+  end
+end

data/app/models/alchemy/ingredients/boolean.rb

@@ -0,0 +1,21 @@
+# frozen_string_literal: true
+
+module Alchemy
+  module Ingredients
+    # A boolean value
+    #
+    class Boolean < Alchemy::Ingredient
+      def value
+        ActiveRecord::Type::Boolean.new.cast(self[:value])
+      end
+
+      # The localized value
+      #
+      # Used by the Element#preview_text method.
+      #
+      def preview_text(_max_length = nil)
+        Alchemy.t(value, scope: "ingredient_values.boolean")
+      end
+    end
+  end
+end