avo 2.33.2 → 2.33.3.pre.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 3dc07d8896fb957e62c31758d46d9edf1e47ed0a2be4af60f10372747838a386
-  data.tar.gz: 30f3ba2be719772d61e24d36888683b8e256e18b0f11b52481952b10ab78bbf9
+  metadata.gz: ece1802c0aff8f4c7aa07963976459b3926348dec30e6bb626af4af3615ab079
+  data.tar.gz: 9cc1670145ad39ec8fb09dee7f843eebb7912f9222b66378c3a15014d8ae341e
 SHA512:
-  metadata.gz: f5acc02b2faa3ce7fa2cfe05118aee925a4daab284fdb78098c0a7dfb1a1b6cf17896a23453c4ab99b95fa971ecc14e40d39d0129839e839620b833af3004d49
-  data.tar.gz: 21f533ccfe75cf2d69ed719dee359593020db71831145d6ecbe784c16e63d3be7c9db6df2dfb5ca6d48deb45ad5ecee63dbc9e108002ca370b4b7dee4908cbd6
+  metadata.gz: dbe3867dfc4e1ba3299bbeb0ae5f4e0dbedb67d887f1a593d3565ded47c6c66df6f1ba3ed1971c212a3420f682bbd7c694121880c37f1d9f0d62f15c6d2a8baf
+  data.tar.gz: b30c40416024a57cf39f1ab184b6cbbbf4a5d8ddbcc4460a7fafa01199e62b4a2b8269c7775709765a0f19bae3bc64db6b1dcfadeb1842d19ff7144cee35ad05

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    avo (2.33.2)
+    avo (2.33.3.pre.2)
       actionview (>= 6.0)
       active_link_to
       activerecord (>= 6.0)
@@ -421,7 +421,7 @@ GEM
     tzinfo (2.0.6)
       concurrent-ruby (~> 1.0)
     unicode-display_width (2.4.0)
-    view_component (3.0.0)
+    view_component (3.1.0)
       activesupport (>= 5.2.0, < 8.0)
       concurrent-ruby (~> 1.0)
       method_source (~> 1.0)

data/app/components/avo/alert_component.html.erb

@@ -10,7 +10,7 @@
       </div>
       <div class="ml-3 w-0 flex-1 pt-0.5">
         <p class="text-sm leading-5 font-semibold">
-          <%== message %>
+          <%= sanitize message %>
         </p>
       </div>
       <div class="ml-4 flex-shrink-0 flex items-center">

data/app/components/avo/field_wrapper_component.html.erb

@@ -24,13 +24,13 @@
           <div class="text-red-600 mt-2 text-sm"><%= record.errors.full_messages_for(field.id).to_sentence %></div>
         <% end %>
         <% if help.present? %>
-          <div class="text-gray-600 mt-2 text-sm"><%== help %></div>
+          <div class="text-gray-600 mt-2 text-sm"><%= sanitize help %></div>
         <% end %>
       <% end %>
     </div>
   </div>
   <% if params[:avo_debug].present? %>
     <!-- Raw value: -->
-    <!-- <%== field.value.inspect %> -->
+    <!-- <%= sanitize field.value.inspect %> -->
   <% end %>
 <% end %>

data/app/components/avo/fields/common/heading_component.html.erb

@@ -3,7 +3,7 @@
     <% if empty %>
     <% elsif value.present? %>
       <% if as_html %>
-        <%== value %>
+        <%= sanitize value %>
       <% else %>
         <div class="font-semibold uppercase"><%= value %></div>
       <% end %>

data/app/components/avo/fields/trix_field/edit_component.html.erb

@@ -20,7 +20,7 @@
       },
       input: trix_id,
       placeholder: @field.placeholder do %>
-      <%== @field.value %>
+      <%= sanitize @field.value %>
     <% end %>
     <%= @form.text_area @field.id,
       class: classes("w-full hidden"),

data/app/components/avo/fields/trix_field/show_component.html.erb

@@ -8,7 +8,7 @@
       <%= link_to t('avo.show_content'), 'javascript:void(0);', class: 'font-bold inline-block', data: { action: 'click->hidden-input#showContent' } %>
     <% end %>
     <div class="<%= content_classes %> " data-hidden-input-target="content">
-      <%== @field.value %>
+      <%= sanitize @field.value %>
     </div>
   </div>
 <% end %>

data/app/components/avo/index/field_wrapper_component.html.erb

@@ -19,6 +19,6 @@
   <% end %>
   <% if params[:avo_debug].present? %>
     <!-- Raw value: -->
-    <!-- <%== @field.value.inspect %> -->
+    <!-- <%= sanitize @field.value.inspect %> -->
   <% end %>
 <% end %>

data/app/components/avo/panel_component.html.erb

@@ -25,7 +25,7 @@
   <% end %>
   <% if body? %>
     <div class="flex flex-col sm:flex-row space-y-4 sm:space-y-0 sm:gap-4 w-full">
-      <div class="relative flex-1 <% if sidebar? %> w-2/3 <% else %> w-full <% end %>">
+      <div class="relative flex-1 w-full <% if sidebar? %> sm:w-2/3 <% end %>">
         <% # The body is wrapped inside another div in order to avoid long & tall panels next to sidebars when the sidebar taller. %>
         <div class="relative <%= white_panel_classes %> <%= @body_classes %>">
           <%= body %>

data/config/master.key

@@ -0,0 +1 @@
+2aeb23d82b909d9c6b5abb62f7058c2a

data/lib/avo/fields/belongs_to_field.rb

@@ -199,11 +199,13 @@ module Avo
       def fill_field(model, key, value, params)
         return model unless model.methods.include? key.to_sym
 
+        valid_model_class = BaseResource.valid_model_class params["#{polymorphic_as}_type"]
+
         if polymorphic_as.present?
-          model.send("#{polymorphic_as}_type=", params["#{polymorphic_as}_type"])
+          model.send("#{polymorphic_as}_type=", valid_model_class)
 
           # If the type is blank, reset the id too.
-          if params["#{polymorphic_as}_type"].blank?
+          if valid_model_class.blank?
             model.send("#{polymorphic_as}_id=", nil)
           else
             model.send("#{polymorphic_as}_id=", params["#{polymorphic_as}_id"])

data/lib/avo/version.rb

@@ -1,3 +1,3 @@
 module Avo
-  VERSION = "2.33.2" unless const_defined?(:VERSION)
+  VERSION = "2.33.3.pre.2" unless const_defined?(:VERSION)
 end

data/public/avo-assets/avo.base.css

@@ -6929,10 +6929,6 @@ trix-toolbar .trix-button-group:not(:first-child){
   width:4rem
 }
 
-.w-2\/3{
-  width:66.666667%
-}
-
 .w-64{
   width:16rem
 }
@@ -9632,6 +9628,10 @@ trix-editor {
     width:auto
   }
 
+  .sm\:w-2\/3{
+    width:66.666667%
+  }
+
   .sm\:w-1\/3{
     width:33.333333%
   }

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: avo
 version: !ruby/object:Gem::Version
-  version: 2.33.2
+  version: 2.33.3.pre.2
 platform: ruby
 authors:
 - Adrian Marin
@@ -9,7 +9,7 @@ authors:
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2023-05-31 00:00:00.000000000 Z
+date: 2023-06-05 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activerecord
@@ -1713,6 +1713,7 @@ files:
 - config/credentials.yml.enc
 - config/i18n-tasks.yml
 - config/initializers/pagy.rb
+- config/master.key
 - config/routes.rb
 - config/spring.rb
 - db/factories.rb
@@ -1976,9 +1977,9 @@ required_ruby_version: !ruby/object:Gem::Requirement
       version: 2.6.0
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
-  - - ">="
+  - - ">"
     - !ruby/object:Gem::Version
-      version: '0'
+      version: 1.3.1
 requirements: []
 rubygems_version: 3.3.3
 signing_key: