decidim-core 0.26.2 → 0.26.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 18193603bd469c0ea5937875b577f4cc5439727b2ad1759e60ea725d029e18f1
-  data.tar.gz: 91c95bec2cdc7af5ad17a5d5ccd165817516fbaf0ed46051c198d3b8b5b1321b
+  metadata.gz: 1863adec9ae8ce9d4d528f247a2f18561de3618eacb84e50c03fae6a89fb2d6e
+  data.tar.gz: 032b9cce96757af5e5d87d687f64231a1630fdc003973b3b16cc4044f7f667bb
 SHA512:
-  metadata.gz: 71b39ec5cae4751ab21048ef686cd6b3704e8d5469d9ba608fcf163944ebf83fc100d1a47c59d4eae4b4c01af4d5074918113a8cf533151e954eb97defa14bf9
-  data.tar.gz: 72011b7df988f022988d64892177f9f4b28338019152d0a2ce46f489696256acdcd095d0da83346e41d70cdeb72c72ef7e21c0e701b50a1d4b35a6de8c51840d
+  metadata.gz: 44579a2195e6d79ca6e5d78a1695815c4db2d2dd850b9a94e819d5219cda61cad771aa172ad99628bb9460e79a99b02fa4cd72fb377649b565b22ad010eb6924
+  data.tar.gz: 959d4d1552af3fd6b25fb1fb27292d8d107c260bedddd5a49dce829f6271772fd8a2c043d401cdc5061a615e1de71157d0b084eeab3b794e9aa3373451ad7ef8

data/app/cells/decidim/amendable/announcement_cell.rb

@@ -39,7 +39,7 @@ module Decidim::Amendable
     end
 
     def proposal_link(resource = model.amendable, text = nil)
-      text ||= %(<strong>#{present(model.amendable).title}</strong>)
+      text ||= %(<strong>#{decidim_sanitize(present(model.amendable).title, strip_tags: true)}</strong>)
       link_to resource_locator(resource).path do
         text
       end

data/app/cells/decidim/card_m_cell.rb

@@ -57,7 +57,7 @@ module Decidim
     end
 
     def title
-      translated_attribute model.title
+      decidim_html_escape(translated_attribute(model.title))
     end
 
     def description

data/app/cells/decidim/content_blocks/cta/show.erb

@@ -1,5 +1,5 @@
 <section class="section">
-  <div class="expanded hero" style="background-image:url(<%= background_image %>);">
+  <div class="expanded hero" style="background-image:url('<%= background_image %>');">
     <div class="hero__container">
       <div class="row">
         <div class="columns small-centered medium-6 text-center">

data/app/cells/decidim/content_blocks/hero/show.erb

@@ -1,4 +1,4 @@
-<section class="extended hero home-section" style="background-image:url(<%= background_image %>);">
+<section class="extended hero home-section" style="background-image:url('<%= background_image %>');">
   <div class="hero__container">
     <div class="row">
       <div class="columns small-centered large-10">

data/app/cells/decidim/content_blocks/highlighted_content_banner/show.erb

@@ -1,5 +1,5 @@
 <section class="extended highligted-content-banner home-section"
-          style="background-image:url(<%= current_organization.attached_uploader(:highlighted_content_banner_image).path %>);">
+          style="background-image:url('<%= current_organization.attached_uploader(:highlighted_content_banner_image).path %>');">
   <div class="highligted-content-banner__container">
     <div class="row">
       <div class="columns large-10">

data/app/cells/decidim/content_blocks/stats_cell.rb

@@ -16,6 +16,7 @@ module Decidim
       def cache_hash
         hash = []
         hash.push(I18n.locale)
+        hash.push(current_organization.cache_key)
         hash.join(Decidim.cache_key_separator)
       end
     end

data/app/controllers/concerns/decidim/resource_versions_concern.rb

@@ -10,6 +10,10 @@ module Decidim
       helper Decidim::TraceabilityHelper
       helper_method :current_version, :versioned_resource
 
+      def show
+        raise ActionController::RoutingError, "Not found" unless current_version
+      end
+
       private
 
       # Overwrite this method in your controller to define how to find the

data/app/controllers/decidim/devise/invitations_controller.rb

@@ -19,7 +19,7 @@ module Decidim
       # invitation. Using the param `invite_redirect` we can redirect the user
       # to a custom path after it has accepted the invitation.
       def after_accept_path_for(resource)
-        params[:invite_redirect] || after_sign_in_path_for(resource)
+        invite_redirect_path || after_sign_in_path_for(resource)
       end
 
       # When a managed user accepts the invitation is promoted to non-managed user.
@@ -30,7 +30,6 @@ module Decidim
           resource.update!(newsletter_notifications_at: Time.current) if update_resource_params[:newsletter_notifications]
           resource.update!(managed: false) if resource.managed?
           resource.update!(accepted_tos_version: resource.organization.tos_version)
-          Decidim::Gamification.increment_score(resource.invited_by, :invitations) if resource.invited_by
         end
 
         resource
@@ -38,6 +37,14 @@ module Decidim
 
       protected
 
+      def invite_redirect_path
+        path = params[:invite_redirect]
+        return unless path
+        return unless path.starts_with?(%r{^/[a-z0-9]+})
+
+        path
+      end
+
       def configure_permitted_parameters
         devise_parameter_sanitizer.permit(:accept_invitation, keys: [:nickname, :tos_agreement, :newsletter_notifications])
       end

data/app/controllers/decidim/devise/registrations_controller.rb

@@ -37,7 +37,7 @@ module Decidim
           end
 
           on(:invalid) do
-            flash.now[:alert] = @form.errors[:base].join(", ") if @form.errors[:base].any?
+            flash.now[:alert] = @form.errors.full_messages.join(", ") if @form.errors.full_messages.any?
             render :new
           end
         end
@@ -58,6 +58,10 @@ module Decidim
         super(hash)
         resource.organization = current_organization
       end
+
+      def devise_mapping
+        ::Devise.mappings[:user]
+      end
     end
   end
 end

data/app/events/decidim/resource_endorsed_event.rb

@@ -15,7 +15,8 @@ module Decidim
     end
 
     def resource_text
-      resource.body
+      return resource.body if resource.respond_to? :body
+      return resource.description if resource.respond_to? :description
     end
 
     def resource_type

data/app/forms/decidim/account_form.rb

@@ -19,9 +19,9 @@ module Decidim
     attribute :personal_url
     attribute :about
 
-    validates :name, presence: true
-    validates :email, presence: true, 'valid_email_2/email': { disposable: true }
-    validates :nickname, presence: true, format: Decidim::User::REGEXP_NICKNAME
+    validates :name, presence: true, format: { with: Decidim::User::REGEXP_NAME }
+    validates :email, presence: true, "valid_email_2/email": { disposable: true }
+    validates :nickname, presence: true, format: { with: Decidim::User::REGEXP_NICKNAME }
 
     validates :nickname, length: { maximum: Decidim::User.nickname_max_length, allow_blank: true }
     validates :password, confirmation: true
@@ -50,7 +50,7 @@ module Decidim
     end
 
     def unique_email
-      return true if Decidim::User.where(
+      return true if Decidim::UserBaseEntity.where(
         organization: context.current_organization,
         email: email
       ).where.not(id: context.current_user.id).empty?
@@ -60,9 +60,10 @@ module Decidim
     end
 
     def unique_nickname
-      return true if Decidim::User.where(
-        organization: context.current_organization,
-        nickname: nickname
+      return true if Decidim::UserBaseEntity.where(
+        "decidim_organization_id = ? AND LOWER(nickname) = ? ",
+        context.current_organization.id,
+        nickname.downcase
       ).where.not(id: context.current_user.id).empty?
 
       errors.add :nickname, :taken

data/app/forms/decidim/amendable/form.rb

@@ -66,7 +66,8 @@ module Decidim
           errors = amendable_form_errors.details[key] - @original_form.errors.details[key]
 
           errors.map do |hash|
-            @amendable_form.errors.add(key, hash[:error]) unless @amendable_form.errors.details[key].include? error: hash[:error]
+            error = hash.delete(:error)
+            @amendable_form.errors.add(key, error, **hash) unless @amendable_form.errors.details[key].include?(error: error)
           end
         end
       end

data/app/forms/decidim/registration_form.rb

@@ -14,9 +14,9 @@ module Decidim
     attribute :tos_agreement, Boolean
     attribute :current_locale, String
 
-    validates :name, presence: true
-    validates :nickname, presence: true, format: /\A[\w\-]+\z/, length: { maximum: Decidim::User.nickname_max_length }
-    validates :email, presence: true, 'valid_email_2/email': { disposable: true }
+    validates :name, presence: true, format: { with: Decidim::User::REGEXP_NAME }
+    validates :nickname, presence: true, format: { with: Decidim::User::REGEXP_NICKNAME }, length: { maximum: Decidim::User.nickname_max_length }
+    validates :email, presence: true, "valid_email_2/email": { disposable: true }
     validates :password, confirmation: true
     validates :password, password: { name: :name, email: :email, username: :nickname }
     validates :password_confirmation, presence: true
@@ -35,11 +35,17 @@ module Decidim
     private
 
     def email_unique_in_organization
-      errors.add :email, :taken if User.no_active_invitation.find_by(email: email, organization: current_organization).present?
+      errors.add :email, :taken if valid_users.find_by(email: email, organization: current_organization).present?
     end
 
     def nickname_unique_in_organization
-      errors.add :nickname, :taken if User.no_active_invitation.find_by(nickname: nickname, organization: current_organization).present?
+      return false unless nickname
+
+      errors.add :nickname, :taken if valid_users.find_by("LOWER(nickname)= ? AND decidim_organization_id = ?", nickname.downcase, current_organization.id).present?
+    end
+
+    def valid_users
+      UserBaseEntity.where(invitation_token: nil)
     end
 
     def no_pending_invitations_exist

data/app/helpers/decidim/filters_helper.rb

@@ -24,7 +24,11 @@ module Decidim
           remote: true,
           html: { id: nil }.merge(html_options)
         ) do |form|
-          yield form
+          # Cannot use `concat()` here because it's not available in cells
+          inner = []
+          inner << hidden_field_tag("per_page", params[:per_page], id: nil) if params[:per_page]
+          inner << capture { yield form }
+          inner.join.html_safe
         end
       end
     end

data/app/mailers/decidim/notification_mailer.rb

@@ -5,6 +5,7 @@ module Decidim
   # a events are received.
   class NotificationMailer < Decidim::ApplicationMailer
     helper Decidim::ResourceHelper
+    helper Decidim::SanitizeHelper
 
     def event_received(event, event_class_name, resource, user, user_role, extra) # rubocop:disable Metrics/ParameterLists
       with_user(user) do

data/app/models/decidim/action_log.rb

@@ -130,16 +130,16 @@ module Decidim
     end
 
     # Whether this activity or log is visible for a given user (can also be nil)
-    #
-    # Returns a True/False.
     def visible_for?(user)
-      return false if resource_lazy.blank?
-      return false if participatory_space_lazy.blank?
-      return false if resource_lazy.respond_to?(:deleted?) && resource_lazy.deleted?
-      return false if resource_lazy.respond_to?(:hidden?) && resource_lazy.hidden?
-      return false if resource_lazy.respond_to?(:can_participate?) && !resource_lazy.can_participate?(user)
-
-      true
+      resource_lazy.present? &&
+        participatory_space_lazy.present? &&
+        !resource_lazy.try(:deleted?) &&
+        !resource_lazy.try(:hidden?) &&
+        (!resource_lazy.respond_to?(:can_participate?) || resource_lazy.try(:can_participate?, user))
+    rescue NameError => e
+      Rails.logger.warn "Failed resource for #{self.class.name}(id=#{id}): #{e.message}"
+
+      false
     end
   end
 end

data/app/models/decidim/user_base_entity.rb

@@ -30,6 +30,7 @@ module Decidim
 
     scope :blocked, -> { where(blocked: true) }
     scope :not_blocked, -> { where(blocked: false) }
+    scope :available, -> { where(deleted_at: nil, blocked: false, managed: false) }
 
     # Public: Returns a collection with all the public entities this user is following.
     #

data/app/packs/src/decidim/editor/clipboard_override.js

@@ -0,0 +1,143 @@
+/* eslint max-lines: ["error", 350] */
+
+/**
+ * Quill clipboard utilities
+ *
+ * Copyright (c) 2017, Slab
+ * Copyright (c) 2014, Jason Chen
+ * Copyright (c) 2013, salesforce.com
+ * BSD 3-Clause "New" or "Revised" License
+ *
+ * Extends the original version from https://github.com/quilljs/quill
+ * Relevant parts converted from TypeScript to JavaScript
+ */
+
+import CodeBlock from "quill/formats/code";
+import { matchNewline, matchBreak, deltaEndsWith, traverse } from "src/decidim/editor/clipboard_utilities";
+
+const Delta = Quill.import("delta");
+const Clipboard = Quill.import("modules/clipboard");
+
+/**
+ * Pasting bold text is broken in Quill as described at:
+ * https://github.com/quilljs/quill/issues/306
+ *
+ * The reason is that the `<strong>` nodes are not recognized as bold types.
+ * This override fixes the issue by introducing parts of the newer Quill code
+ * at GitHub and defining the `<strong>` tags as bold tags.
+ */
+export default class ClipboardOverride extends Clipboard {
+  constructor(quill, options) {
+    super(quill, options);
+    this.overrideMatcher("b", "b, strong");
+    this.overrideMatcher("br", "br", matchBreak);
+
+    // Change the matchNewLine matchers to the newer version
+    this.matchers[1][1] = matchNewline;
+    this.matchers[3][1] = matchNewline;
+
+    // Remove `matchSpacing` as that is also removed in the newer versions.
+    this.removeMatcher(Node.ELEMENT_NODE, "matchSpacing");
+  }
+
+  overrideMatcher(originalSelector, newSelector, newMatcher = null) {
+    const idx = this.matchers.findIndex((item) => item[0] === originalSelector);
+    if (idx >= 0) {
+      this.matchers[idx][0] = newSelector;
+      if (newMatcher) {
+        this.matchers[idx][1] = newMatcher;
+      }
+    }
+  }
+
+  removeMatcher(selector, matcherName) {
+    const idx = this.matchers.findIndex((item) => item[0] === selector && item[1].name === matcherName);
+    if (idx >= 0) {
+      this.matchers.splice(idx, 1);
+    }
+  }
+
+  onPaste(ev) {
+    if (ev.defaultPrevented || !this.quill.isEnabled()) {
+      return;
+    }
+    ev.preventDefault();
+    const range = this.quill.getSelection(true);
+    if (range === null) {
+      return;
+    }
+    const html = ev.clipboardData.getData("text/html");
+    const text = ev.clipboardData.getData("text/plain");
+    const files = Array.from(ev.clipboardData.files || []);
+    if (!html && files.length > 0) {
+      this.quill.uploader.upload(range, files);
+      return;
+    }
+    if (html && files.length > 0) {
+      const doc = new DOMParser().parseFromString(html, "text/html");
+      if (
+        doc.body.childElementCount === 1 &&
+        doc.body.firstElementChild.tagName === "IMG"
+      ) {
+        this.quill.uploader.upload(range, files);
+        return;
+      }
+    }
+    this.onPasteRange(range, { html, text });
+  }
+
+  onPasteRange(range, { text, html }) {
+    const formats = this.quill.getFormat(range.index);
+    const pastedDelta = this.convertPaste({ text, html }, formats);
+    // debug.log('onPaste", pastedDelta, { text, html });
+    const delta = new Delta().retain(range.index).delete(range.length).concat(pastedDelta);
+    this.quill.updateContents(delta, Quill.sources.USER);
+    // range.length contributes to delta.length()
+    this.quill.setSelection(
+      delta.length() - range.length,
+      Quill.sources.SILENT,
+    );
+    this.quill.scrollIntoView();
+  }
+
+  convertPaste({ html, text }, formats = {}) {
+    if (formats[CodeBlock.blotName]) {
+      return new Delta().insert(text, {
+        [CodeBlock.blotName]: formats[CodeBlock.blotName]
+      });
+    }
+    if (!html) {
+      return new Delta().insert(text || "");
+    }
+    const delta = this.convertPasteHTML(html);
+    // Remove trailing newline
+    if (
+      deltaEndsWith(delta, "\n") &&
+      (delta.ops[delta.ops.length - 1].attributes === null || formats.table)
+    ) {
+      return delta.compose(new Delta().retain(delta.length() - 1).delete(1));
+    }
+    return delta;
+  }
+
+  convertPasteHTML(html) {
+    const doc = new DOMParser().parseFromString(html, "text/html");
+    const container = doc.body;
+    const nodeMatches = new WeakMap();
+    const [elementMatchers, textMatchers] = this.prepareMatching(
+      container,
+      nodeMatches
+    );
+    return traverse(
+      this.quill.scroll,
+      container,
+      elementMatchers,
+      textMatchers,
+      nodeMatches
+    );
+  }
+}
+
+// Disable warning messages from overwritting modules
+Quill.debug("error");
+Quill.register({"modules/clipboard": ClipboardOverride}, true);

data/app/packs/src/decidim/editor/clipboard_utilities.js

@@ -0,0 +1,119 @@
+import { BlockEmbed } from "quill/blots/block";
+
+const Delta = Quill.import("delta");
+const Parchment = Quill.import("parchment");
+
+// Newer version used only for the pasting, not compatible with the version of
+// Quill in use.
+const traverse = (scroll, node, elementMatchers, textMatchers, nodeMatches) => { // eslint-disable-line max-params
+  // Post-order
+  if (node.nodeType === node.TEXT_NODE) {
+    return textMatchers.reduce((delta, matcher) => {
+      return matcher(node, delta, scroll);
+    }, new Delta());
+  }
+  if (node.nodeType === node.ELEMENT_NODE) {
+    return Array.from(node.childNodes || []).reduce((delta, childNode) => {
+      let childrenDelta = traverse(
+        scroll,
+        childNode,
+        elementMatchers,
+        textMatchers,
+        nodeMatches,
+      );
+      if (childNode.nodeType === node.ELEMENT_NODE) {
+        childrenDelta = elementMatchers.reduce((reducedDelta, matcher) => {
+          return matcher(childNode, reducedDelta, scroll);
+        }, childrenDelta);
+        childrenDelta = (nodeMatches.get(childNode) || []).reduce(
+          (reducedDelta, matcher) => {
+            return matcher(childNode, reducedDelta, scroll);
+          },
+          childrenDelta,
+        );
+      }
+      return delta.concat(childrenDelta);
+    }, new Delta());
+  }
+  return new Delta();
+}
+
+const deltaEndsWith = (delta, text) => {
+  let endText = "";
+  for (let idx = delta.ops.length - 1; idx >= 0 && endText.length < text.length; idx -= 1) {
+    const op = delta.ops[idx];
+    if (typeof op.insert !== "string") {
+      break;
+    }
+    endText = op.insert + endText;
+  }
+  return endText.slice(-1 * text.length) === text;
+}
+
+const isLine = (node) => {
+  if (node.childNodes.length === 0) {
+    // Exclude embed blocks
+    return false;
+  }
+  return [
+    "address", "article", "blockquote", "canvas", "dd", "div", "dl", "dt",
+    "fieldset", "figcaption", "figure", "footer", "form", "h1", "h2", "h3",
+    "h4", "h5", "h6", "header", "iframe", "li", "main", "nav", "ol", "output",
+    "p", "pre", "section", "table", "td", "tr", "ul", "video"
+  ].includes(node.tagName.toLowerCase());
+}
+
+const matchNewLineScroll = (nextSibling, delta, scroll) => {
+  if (!scroll) {
+    return null;
+  }
+
+  const match = Parchment.query(nextSibling)
+  if (match && match.prototype instanceof BlockEmbed) {
+    return delta.insert("\n");
+  }
+  return null;
+}
+
+const matchNewline = (node, delta, scroll) => {
+  if (!deltaEndsWith(delta, "\n")) {
+    // When scroll is defined, it was initiated from the paste event. Otherwise
+    // it is a normal Quill initiated traversal which handles adding the line
+    // breaks already.
+    if (scroll && node.nodeType === node.ELEMENT_NODE && node.tagName === "BR") {
+      return delta.insert({"break": ""});
+    }
+    if (isLine(node)) {
+      return delta.insert("\n");
+    }
+    if (delta.length() > 0 && node.nextSibling) {
+      let { nextSibling } = node;
+      while (nextSibling !== null) {
+        if (isLine(nextSibling)) {
+          return delta.insert("\n");
+        }
+        const scrollMatch = matchNewLineScroll(nextSibling, delta, scroll);
+        if (scrollMatch) {
+          return scrollMatch;
+        }
+        nextSibling = nextSibling.firstChild;
+      }
+    }
+  }
+  return delta;
+}
+
+const matchBreak = (node, delta) => {
+  if (!deltaEndsWith(delta, "\n")) {
+    delta.insert({"break": ""});
+  }
+  return delta;
+}
+
+export {
+  traverse,
+  deltaEndsWith,
+  isLine,
+  matchNewline,
+  matchBreak
+}

data/app/packs/src/decidim/editor/linebreak_module.js

@@ -129,7 +129,6 @@ class ScrollOvderride extends Scroll {
 Quill.register("blots/scroll", ScrollOvderride, true);
 Parchment.register(ScrollOvderride);
 
-
 export default function lineBreakButtonHandler(quill) {
   let range = quill.selection.getRange()[0];
   let currentLeaf = quill.getLeaf(range.index)[0];
@@ -167,13 +166,6 @@ Quill.register("modules/linebreak", (quill) => {
     }
   });
 
-  quill.clipboard.addMatcher("BR", (node) => {
-    if (node?.parentNode?.tagName === "A") {
-      return new Delta().insert("\n");
-    }
-    return new Delta().insert({"break": ""});
-  });
-
   addEnterBindings(quill);
   backspaceBindingsRangeAny(quill);
   backspaceBindings(quill);

data/app/packs/src/decidim/editor.js

@@ -1,6 +1,7 @@
 /* eslint-disable require-jsdoc */
 
 import lineBreakButtonHandler from "src/decidim/editor/linebreak_module"
+import "src/decidim/editor/clipboard_override"
 import "src/decidim/vendor/image-resize.min"
 import "src/decidim/vendor/image-upload.min"
 
@@ -10,6 +11,7 @@ export default function createQuillEditor(container) {
   const toolbar = $(container).data("toolbar");
   const disabled = $(container).data("disabled");
 
+  const allowedEmptyContentSelector = "iframe";
   let quillToolbar = [
     ["bold", "italic", "underline", "linebreak"],
     [{ list: "ordered" }, { list: "bullet" }],
@@ -93,10 +95,15 @@ export default function createQuillEditor(container) {
     });
     container.dispatchEvent(event);
 
-    if (text === "\n" || text === "\n\n") {
+    if ((text === "\n" || text === "\n\n") && quill.root.querySelectorAll(allowedEmptyContentSelector).length === 0) {
       $input.val("");
     } else {
-      $input.val(quill.root.innerHTML);
+      const emptyParagraph = "<p><br></p>";
+      const cleanHTML = quill.root.innerHTML.replace(
+        new RegExp(`^${emptyParagraph}|${emptyParagraph}$`, "g"),
+        ""
+      );
+      $input.val(cleanHTML);
     }
   });
   // After editor is ready, linebreak_module deletes two extraneous new lines

data/app/packs/src/decidim/map/factory.js

@@ -33,7 +33,7 @@ import MapDragMarkerController from "src/decidim/map/controller/drag_marker"
  * @param {Object} config The map configuration object.
  * @returns {MapController} The controller for the map.
  */
-export default function createMapController(mapId, config) {
+const createMapController = function(mapId, config) {
   if (config.type === "static") {
     return new MapStaticController(mapId, config);
   } else if (config.type === "drag-marker") {
@@ -42,3 +42,5 @@ export default function createMapController(mapId, config) {
 
   return new MapMarkersController(mapId, config);
 }
+
+window.Decidim.createMapController = createMapController;

data/app/packs/src/decidim/map/legacy.js

@@ -1,7 +1,7 @@
 /* eslint-disable require-jsdoc */
 
 import * as L from "leaflet";
-import createMapController from "src/decidim/map/factory"
+import "src/decidim/map/factory"
 
 /**
  * @deprecated
@@ -60,7 +60,7 @@ const loadMap = (mapId, markersData) => {
   legacyMapSupport($map);
 
   const mapData = $map.data("decidim-map");
-  const ctrl = createMapController(mapId, mapData);
+  const ctrl = window.Decidim.createMapController(mapId, mapData);
   const map = ctrl.load();
 
   L.tileLayer.here(mapData.tileLayer).addTo(map);

data/app/packs/src/decidim/map.js

@@ -1,4 +1,4 @@
-import createMapController from "src/decidim/map/factory"
+import "src/decidim/map/factory"
 
 $(() => {
   // Load the map controller factory method in the document.ready handler to
@@ -20,7 +20,7 @@ $(() => {
     }
 
     const mapConfig = $map.data("decidim-map");
-    const ctrl = createMapController(mapId, mapConfig);
+    const ctrl = window.Decidim.createMapController(mapId, mapConfig);
     const map = ctrl.load();
 
     $map.data("map", map);

data/app/packs/stylesheets/decidim/modules/_cards.scss

@@ -30,6 +30,8 @@ $datetime-bg: var(--primary);
   border-radius: $card-border-radius;
   // Keep visible for accessibility (active/focused card as a link)
   overflow: visible;
+  overflow-wrap: break-word;
+  hyphens: auto;
 
   @include modifiers(
     border-top-color,