alchemy_cms 8.2.4 → 8.2.5

data/app/components/alchemy/admin/locale_select.rb

@@ -10,12 +10,12 @@ module Alchemy
       end
 
       def call
-        form_tag(helpers.url_for, method: :get) do
-          if auto_submit
+        if auto_submit
+          form_tag(helpers.url_for, method: :get) do
             content_tag("alchemy-auto-submit", locale_select)
-          else
-            locale_select
           end
+        else
+          locale_select
         end
       end
 

data/app/javascript/alchemy_admin/image_cropper.js

@@ -89,7 +89,20 @@ export default class ImageCropper {
   }
 
   reset() {
-    this.#cropper.setData(this.defaultBoxSize)
+    const cropper = this.#cropper
+    // Apply the default size. cropperjs clamps the crop box to its maximum size.
+    cropper.setData(this.defaultBoxSize)
+    // When the default box sits at the maximum crop box size, sub-pixel rounding
+    // makes cropperjs treat setData's box as oversized and revert its position
+    // (renderCropBox resets top/left to their old values). Re-apply the position
+    // in canvas coordinates afterwards – that does not touch the size, so it is
+    // not reverted and the mask actually moves to the default box.
+    const canvas = cropper.getCanvasData()
+    const scale = canvas.width / canvas.naturalWidth
+    cropper.setCropBoxData({
+      left: canvas.left + this.defaultBoxSize.x * scale,
+      top: canvas.top + this.defaultBoxSize.y * scale
+    })
     this.update(this.defaultBoxSize)
   }
 

data/lib/alchemy/configuration/collection_option.rb

@@ -66,7 +66,7 @@ module Alchemy
       end
 
       def get_item_class(item_type)
-        "Alchemy::Configuration::#{item_type.to_s.classify}Option".constantize
+        "Alchemy::Configuration::#{item_type.to_s.camelcase}Option".constantize
       end
     end
   end

data/lib/alchemy/routing_constraints.rb

@@ -16,11 +16,21 @@ module Alchemy
       @request = request
       @params = @request.params
 
-      handable_format? && no_rails_route?
+      handable_format? && no_dotfile_route? && no_rails_route?
     end
 
     private
 
+    # We don't want to handle requests to dotfile URLs.
+    #
+    # A page urlname never starts with a dot, so any such request
+    # (/.well-known/ ACME challenges, /.env or /.git probes, etc.)
+    # should never be served by a page.
+    #
+    def no_dotfile_route?
+      !@params["urlname"].start_with?(".")
+    end
+
     # We only want html requests to be handled by us.
     #
     # If an unknown format is requested we want to handle this,

data/lib/alchemy/version.rb

@@ -1,7 +1,7 @@
 # frozen_string_literal: true
 
 module Alchemy
-  VERSION = "8.2.4"
+  VERSION = "8.2.5"
 
   def self.version
     VERSION

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: alchemy_cms
 version: !ruby/object:Gem::Version
-  version: 8.2.4
+  version: 8.2.5
 platform: ruby
 authors:
 - Thomas von Deyen