decidim-core 0.26.4 → 0.27.0.rc1

data/lib/decidim/core/test.rb

@@ -71,6 +71,3 @@ require "decidim/core/test/shared_examples/categories_container_examples"
 require "decidim/core/test/shared_examples/assembly_announcements_examples"
 require "decidim/core/test/shared_examples/translated_event_examples"
 require "decidim/core/test/shared_examples/conversations_examples"
-require "decidim/core/test/shared_examples/versions_controller_examples"
-require "decidim/core/test/shared_examples/resource_endorsed_event_examples"
-require "decidim/core/test/shared_examples/mcell_examples"

data/lib/decidim/core/version.rb

@@ -4,7 +4,7 @@ module Decidim
   # This holds the decidim-core version.
   module Core
     def self.version
-      "0.26.4"
+      "0.27.0.rc1"
     end
   end
 end

data/lib/decidim/core.rb

@@ -3,10 +3,13 @@
 require "decidim/core/engine"
 require "decidim/core/api"
 require "decidim/core/version"
+
 # Decidim configuration.
 module Decidim
+  autoload :Env, "decidim/env"
   autoload :Deprecations, "decidim/deprecations"
   autoload :ActsAsAuthor, "decidim/acts_as_author"
+  autoload :ActsAsTree, "decidim/acts_as_tree"
   autoload :TranslatableAttributes, "decidim/translatable_attributes"
   autoload :TranslatableResource, "decidim/translatable_resource"
   autoload :JsonbAttributes, "decidim/jsonb_attributes"
@@ -14,6 +17,7 @@ module Decidim
   autoload :AuthorizationFormBuilder, "decidim/authorization_form_builder"
   autoload :FilterFormBuilder, "decidim/filter_form_builder"
   autoload :ComponentManifest, "decidim/component_manifest"
+  autoload :NotificationSettingManifest, "decidim/notification_setting_manifest"
   autoload :ParticipatorySpaceManifest, "decidim/participatory_space_manifest"
   autoload :ResourceManifest, "decidim/resource_manifest"
   autoload :Resourceable, "decidim/resourceable"
@@ -43,7 +47,6 @@ module Decidim
   autoload :FriendlyDates, "decidim/friendly_dates"
   autoload :Nicknamizable, "decidim/nicknamizable"
   autoload :HasReference, "decidim/has_reference"
-  autoload :Attributes, "decidim/attributes"
   autoload :StatsRegistry, "decidim/stats_registry"
   autoload :Exporters, "decidim/exporters"
   autoload :FileZipper, "decidim/file_zipper"
@@ -51,7 +54,9 @@ module Decidim
   autoload :MenuItem, "decidim/menu_item"
   autoload :MenuRegistry, "decidim/menu_registry"
   autoload :ManifestRegistry, "decidim/manifest_registry"
+  autoload :AssetRouter, "decidim/asset_router"
   autoload :EngineRouter, "decidim/engine_router"
+  autoload :UrlOptionResolver, "decidim/url_option_resolver"
   autoload :Events, "decidim/events"
   autoload :ViewHooks, "decidim/view_hooks"
   autoload :ContentBlockRegistry, "decidim/content_block_registry"
@@ -64,6 +69,7 @@ module Decidim
   autoload :NewsletterEncryptor, "decidim/newsletter_encryptor"
   autoload :NewsletterParticipant, "decidim/newsletter_participant"
   autoload :Searchable, "decidim/searchable"
+  autoload :FilterableResource, "decidim/filterable_resource"
   autoload :SearchResourceFieldsMapper, "decidim/search_resource_fields_mapper"
   autoload :QueryExtensions, "decidim/query_extensions"
   autoload :ParticipatorySpaceResourceable, "decidim/participatory_space_resourceable"
@@ -71,9 +77,9 @@ module Decidim
   autoload :ViewModel, "decidim/view_model"
   autoload :FingerprintCalculator, "decidim/fingerprint_calculator"
   autoload :Fingerprintable, "decidim/fingerprintable"
-  autoload :DataPortability, "decidim/data_portability"
-  autoload :DataPortabilitySerializers, "decidim/data_portability_serializers"
-  autoload :DataPortabilityExporter, "decidim/data_portability_exporter"
+  autoload :DownloadYourData, "decidim/download_your_data"
+  autoload :DownloadYourDataSerializers, "decidim/download_your_data_serializers"
+  autoload :DownloadYourDataExporter, "decidim/download_your_data_exporter"
   autoload :Amendable, "decidim/amendable"
   autoload :Gamification, "decidim/gamification"
   autoload :Hashtag, "decidim/hashtag"
@@ -96,7 +102,17 @@ module Decidim
   autoload :RecordEncryptor, "decidim/record_encryptor"
   autoload :AttachmentAttributes, "decidim/attachment_attributes"
   autoload :CarrierWaveMigratorService, "decidim/carrier_wave_migrator_service"
+  autoload :ReminderRegistry, "decidim/reminder_registry"
+  autoload :ReminderManifest, "decidim/reminder_manifest"
+  autoload :ManifestMessages, "decidim/manifest_messages"
   autoload :CommonPasswords, "decidim/common_passwords"
+  autoload :HasArea, "decidim/has_area"
+  autoload :AttributeObject, "decidim/attribute_object"
+  autoload :Query, "decidim/query"
+  autoload :Command, "decidim/command"
+  autoload :EventRecorder, "decidim/event_recorder"
+  autoload :ControllerHelpers, "decidim/controller_helpers"
+  autoload :ProcessesFileLocally, "decidim/processes_file_locally"
 
   include ActiveSupport::Configurable
   # Loads seeds from all engines.
@@ -259,8 +275,8 @@ module Decidim
     true
   end
 
-  # Time that data portability files are available in server
-  config_accessor :data_portability_expiry_time do
+  # Time that download your data files are available in server
+  config_accessor :download_your_data_expiry_time do
     7.days
   end
 
@@ -383,7 +399,43 @@ module Decidim
   # Defines the name of the cookie used to check if the user allows Decidim to
   # set cookies.
   config_accessor :consent_cookie_name do
-    "decidim-cc"
+    "decidim-consent"
+  end
+
+  # Defines cookie categories. Note that when adding a cookie you need to
+  # add following i18n entries also (change 'foo' with the name of the cookie).
+  #
+  # layouts.decidim.cookie_consent.cookie_details.cookies.foo.service
+  # layouts.decidim.cookie_consent.cookie_details.cookies.foo.description
+  config_accessor :consent_categories do
+    [
+      {
+        slug: "essential",
+        mandatory: true,
+        cookies: [
+          {
+            type: "cookie",
+            name: "_session_id"
+          },
+          {
+            type: "cookie",
+            name: Decidim.consent_cookie_name
+          }
+        ]
+      },
+      {
+        slug: "preferences",
+        mandatory: false
+      },
+      {
+        slug: "analytics",
+        mandatory: false
+      },
+      {
+        slug: "marketing",
+        mandatory: false
+      }
+    ]
   end
 
   # Blacklisted passwords. Array may contain strings and regex entries.
@@ -391,6 +443,23 @@ module Decidim
     []
   end
 
+  # Defines if admins are required to have stronger passwords than other users
+  config_accessor :admin_password_strong do
+    true
+  end
+
+  config_accessor :admin_password_expiration_days do
+    90
+  end
+
+  config_accessor :admin_password_min_length do
+    15
+  end
+
+  config_accessor :admin_password_repetition_times do
+    5
+  end
+
   # This is an internal key that allow us to properly configure the caching key separator. This is useful for redis cache store
   # as it creates some namespaces within the cached data.
   # use `config.cache_key_separator = ":"` in your initializer to have namespaced data
@@ -398,6 +467,11 @@ module Decidim
     "/"
   end
 
+  # Enable/Disable the service worker
+  config_accessor :service_worker_enabled do
+    Rails.env.exclude?("development")
+  end
+
   # Public: Registers a global engine. This method is intended to be used
   # by component engines that also offer unscoped functionality
   #
@@ -471,6 +545,10 @@ module Decidim
     resource_registry.register(name, &block)
   end
 
+  def self.notification_settings(name, &block)
+    notification_settings_registry.register(name, &block)
+  end
+
   # Public: Finds all registered resource manifests via the `register_component`
   # method.
   #
@@ -534,11 +612,19 @@ module Decidim
     @participatory_space_registry ||= ManifestRegistry.new(:participatory_spaces)
   end
 
+  def self.reminders_registry
+    @reminders_registry ||= ReminderRegistry.new
+  end
+
   # Public: Stores the registry of resource spaces
   def self.resource_registry
     @resource_registry ||= ManifestRegistry.new(:resources)
   end
 
+  def self.notification_settings_registry
+    @notification_settings_registry ||= ManifestRegistry.new(:notification_settings)
+  end
+
   # Public: Stores the registry for user permissions
   def self.permissions_registry
     @permissions_registry ||= PermissionsRegistry.new
@@ -594,13 +680,12 @@ module Decidim
   #         organization or a model responding to the `organization` method.
   #
   def self.organization_settings(model)
-    organization = begin
-      if model.is_a?(Decidim::Organization)
-        model
-      elsif model.respond_to?(:organization) && model.organization.present?
-        model.organization
-      end
-    end
+    organization = if model.is_a?(Decidim::Organization)
+                     model
+                   elsif model.respond_to?(:organization) && model.organization.present?
+                     model.organization
+                   end
+
     return Decidim::OrganizationSettings.defaults unless organization
 
     Decidim::OrganizationSettings.for(organization)
@@ -625,4 +710,13 @@ module Decidim
   def self.register_assets_path(path)
     Rails.autoloaders.main.ignore(path) if Rails.configuration.autoloader == :zeitwerk
   end
+
+  # Checks if a particular decidim gem is installed
+  # Note that defined(Decidim::Something) does not work all the times, specially when the
+  # Gemfile uses the "path" parameter to find the module.
+  # This is because the module can be defined by some files searched by Rails automatically
+  # (ie: decidim-initiatives/lib/decidim/initiatives/version.rb automatically defines Decidim::Intiatives even if not required)
+  def self.module_installed?(mod)
+    Gem.loaded_specs.has_key?("decidim-#{mod}")
+  end
 end

data/lib/decidim/{data_portability.rb → download_your_data.rb}

@@ -3,8 +3,8 @@
 require "active_support/concern"
 
 module Decidim
-  # This concern contains the logic related to data portability.
-  module DataPortability
+  # This concern contains the logic related to download your data.
+  module DownloadYourData
     extend ActiveSupport::Concern
 
     included do
@@ -23,7 +23,7 @@ module Decidim
 
       # Returns a collection of images scoped by User.
       # Returns nil for default.
-      def self.data_portability_images(_user)
+      def self.download_your_data_images(_user)
         nil
       end
     end

data/lib/decidim/{data_portability_serializers/data_portability_conversation_serializer.rb → download_your_data_serializers/download_your_data_conversation_serializer.rb}

@@ -2,8 +2,8 @@
 
 module Decidim
   # This class serializes a Message so can be exported to CSV
-  module DataPortabilitySerializers
-    class DataPortabilityConversationSerializer < Decidim::Exporters::Serializer
+  module DownloadYourDataSerializers
+    class DownloadYourDataConversationSerializer < Decidim::Exporters::Serializer
       include Decidim::ResourceHelper
 
       # Public: Initializes the serializer with a conversation.

data/lib/decidim/{data_portability_serializers/data_portability_follow_serializer.rb → download_your_data_serializers/download_your_data_follow_serializer.rb}

@@ -2,8 +2,8 @@
 
 module Decidim
   # This class serializes a Follow so can be exported to CSV
-  module DataPortabilitySerializers
-    class DataPortabilityFollowSerializer < Decidim::Exporters::Serializer
+  module DownloadYourDataSerializers
+    class DownloadYourDataFollowSerializer < Decidim::Exporters::Serializer
       include Decidim::ResourceHelper
 
       # Public: Exports a hash with the serialized data for follow.

data/lib/decidim/{data_portability_serializers/data_portability_identity_serializer.rb → download_your_data_serializers/download_your_data_identity_serializer.rb}

@@ -2,8 +2,8 @@
 
 module Decidim
   # This class serializes a Identity so can be exported to CSV
-  module DataPortabilitySerializers
-    class DataPortabilityIdentitySerializer < Decidim::Exporters::Serializer
+  module DownloadYourDataSerializers
+    class DownloadYourDataIdentitySerializer < Decidim::Exporters::Serializer
       include Decidim::ResourceHelper
 
       # Public: Exports a hash with the serialized data for this identities.

data/lib/decidim/{data_portability_serializers/data_portability_notification_serializer.rb → download_your_data_serializers/download_your_data_notification_serializer.rb}

@@ -2,8 +2,8 @@
 
 module Decidim
   # This class serializes a Follow so can be exported to CSV
-  module DataPortabilitySerializers
-    class DataPortabilityNotificationSerializer < Decidim::Exporters::Serializer
+  module DownloadYourDataSerializers
+    class DownloadYourDataNotificationSerializer < Decidim::Exporters::Serializer
       include Decidim::ResourceHelper
 
       # Public: Exports a hash with the serialized data for follow.

data/lib/decidim/{data_portability_serializers/data_portability_participatory_space_private_user_serializer.rb → download_your_data_serializers/download_your_data_participatory_space_private_user_serializer.rb}

@@ -2,8 +2,8 @@
 
 module Decidim
   # This class serializes a User so can be exported to CSV
-  module DataPortabilitySerializers
-    class DataPortabilityParticipatorySpacePrivateUserSerializer < Decidim::Exporters::Serializer
+  module DownloadYourDataSerializers
+    class DownloadYourDataParticipatorySpacePrivateUserSerializer < Decidim::Exporters::Serializer
       include Decidim::ResourceHelper
 
       # Public: Exports a hash with the serialized data for this user.

data/lib/decidim/{data_portability_serializers/data_portability_report_serializer.rb → download_your_data_serializers/download_your_data_report_serializer.rb}

@@ -2,8 +2,8 @@
 
 module Decidim
   # This class serializes a Report so can be exported to CSV
-  module DataPortabilitySerializers
-    class DataPortabilityReportSerializer < Decidim::Exporters::Serializer
+  module DownloadYourDataSerializers
+    class DownloadYourDataReportSerializer < Decidim::Exporters::Serializer
       include Decidim::ResourceHelper
 
       # Public: Exports a hash with the serialized data for this conversation.

data/lib/decidim/{data_portability_serializers/data_portability_user_group_serializer.rb → download_your_data_serializers/download_your_data_user_group_serializer.rb}

@@ -2,8 +2,8 @@
 
 module Decidim
   # This class serializes a User so can be exported to CSV
-  module DataPortabilitySerializers
-    class DataPortabilityUserGroupSerializer < Decidim::Exporters::Serializer
+  module DownloadYourDataSerializers
+    class DownloadYourDataUserGroupSerializer < Decidim::Exporters::Serializer
       include Decidim::ResourceHelper
 
       # Public: Exports a hash with the serialized data for this user.

data/lib/decidim/{data_portability_serializers/data_portability_user_serializer.rb → download_your_data_serializers/download_your_data_user_serializer.rb}

@@ -2,8 +2,8 @@
 
 module Decidim
   # This class serializes a User so can be exported to CSV
-  module DataPortabilitySerializers
-    class DataPortabilityUserSerializer < Decidim::Exporters::Serializer
+  module DownloadYourDataSerializers
+    class DownloadYourDataUserSerializer < Decidim::Exporters::Serializer
       include Decidim::ResourceHelper
 
       # Public: Exports a hash with the serialized data for this user.
@@ -19,7 +19,7 @@ module Decidim
             name: resource.organization.try(:name)
           },
           newsletter_notifications_at: resource.newsletter_notifications_at,
-          email_on_notification: resource.email_on_notification,
+          notifications_sending_frequency: resource.notifications_sending_frequency,
           admin: resource.admin,
           personal_url: resource.personal_url,
           about: resource.about,

data/lib/decidim/download_your_data_serializers.rb

@@ -0,0 +1,23 @@
+# frozen_string_literal: true
+
+module Decidim
+  module DownloadYourDataSerializers
+    autoload :DownloadYourDataUserSerializer, "decidim/download_your_data_serializers/download_your_data_user_serializer"
+    autoload :DownloadYourDataUserGroupSerializer, "decidim/download_your_data_serializers/download_your_data_user_group_serializer"
+    autoload :DownloadYourDataConversationSerializer, "decidim/download_your_data_serializers/download_your_data_conversation_serializer"
+    autoload :DownloadYourDataReportSerializer, "decidim/download_your_data_serializers/download_your_data_report_serializer"
+    autoload :DownloadYourDataFollowSerializer, "decidim/download_your_data_serializers/download_your_data_follow_serializer"
+    autoload :DownloadYourDataNotificationSerializer, "decidim/download_your_data_serializers/download_your_data_notification_serializer"
+    autoload :DownloadYourDataIdentitySerializer, "decidim/download_your_data_serializers/download_your_data_identity_serializer"
+    autoload :DownloadYourDataParticipatorySpacePrivateUserSerializer, "decidim/download_your_data_serializers/download_your_data_participatory_space_private_user_serializer"
+
+    def self.data_entities
+      ["Decidim::Follow", "Decidim::Identity",
+       "Decidim::Messaging::Conversation", "Decidim::Notification",
+       "Decidim::ParticipatorySpacePrivateUser", "Decidim::Report", "Decidim::User", "Decidim::UserGroup"] |
+        Decidim.component_manifests.map(&:data_portable_entities).flatten |
+        Decidim.participatory_space_manifests.map(&:data_portable_entities).flatten |
+        (Decidim::Comments.data_portable_entities.flatten if defined?(Decidim::Comments))
+    end
+  end
+end

data/lib/decidim/engine_router.rb

@@ -34,7 +34,7 @@ module Decidim
     end
 
     def default_url_options
-      @default_url_options.reverse_merge(ActionMailer::Base.default_url_options)
+      @default_url_options.reverse_merge(configured_default_url_options)
     end
 
     def respond_to_missing?(method_name, include_private = false)
@@ -52,5 +52,11 @@ module Decidim
     def route_helper?(method_name)
       method_name.to_s.match?(/_(url|path)$/)
     end
+
+    def configured_default_url_options
+      @configured_default_url_options ||=
+        ActionMailer::Base.default_url_options.presence ||
+        UrlOptionResolver.new.options
+    end
   end
 end

data/lib/decidim/env.rb

@@ -0,0 +1,56 @@
+# frozen_string_literal: true
+
+module Decidim
+  # This class can be used to parse ENV variables to a set of predefined values
+  # For instance, "", nil, "false" or 0 will all translate into false using valid?
+  class Env
+    FALSE_VALUES = %w(0 false no).freeze
+
+    def initialize(name, default = nil)
+      @name = name
+      @value = ENV.fetch(name, nil)
+      @default = default
+    end
+
+    def value
+      @value.presence || @default
+    end
+
+    delegate :to_s, :to_json, to: :value
+
+    def blank?
+      value.blank? || FALSE_VALUES.include?(value.to_s.downcase)
+    end
+
+    # rubocop:disable Rails/Present
+    def present?
+      !blank?
+    end
+    # rubocop:enable Rails/Present
+
+    def to_boolean_string
+      present?.to_s
+    end
+
+    def to_i
+      str = blank? ? @default : value
+      str.to_s.to_i
+    end
+
+    def to_f
+      str = blank? ? @default : value
+      str.to_s.to_f
+    end
+
+    def default_or_present_if_exists
+      return @default unless ENV.has_key?(@name)
+
+      @value.present? && FALSE_VALUES.exclude?(@value.to_s.downcase)
+    end
+
+    def to_array(separator: ",")
+      str = blank? ? @default : value
+      str.to_s.split(separator).map(&:strip)
+    end
+  end
+end

data/lib/decidim/event_recorder.rb

@@ -0,0 +1,25 @@
+# frozen_string_literal: true
+
+# Copyright (c) 2016 Andy Pike - The MIT license
+#
+# This file has been copied from https://github.com/andypike/rectify/blob/master/lib/rectify/command.rb
+# We have done this so we can decouple Decidim from any Virtus dependency, which is a dead project
+# Please follow Decidim discussion to understand more https://github.com/decidim/decidim/discussions/7234
+module Decidim
+  class EventRecorder
+    attr_reader :events
+
+    def initialize
+      @events = {}
+    end
+
+    def method_missing(method_name, *args, &_block)
+      args = args.first if args.size == 1
+      @events[method_name] = args
+    end
+
+    def respond_to_missing?(_method_name, _include_private = false)
+      true
+    end
+  end
+end

data/lib/decidim/events/base_event.rb

@@ -59,24 +59,20 @@ module Decidim
 
       # Caches the path for the given resource.
       def resource_path
-        @resource_path ||= begin
-          if resource&.respond_to?(:polymorphic_resource_path)
-            resource.polymorphic_resource_path(resource_url_params)
-          else
-            resource_locator.path(resource_url_params)
-          end
-        end
+        @resource_path ||= if resource.respond_to?(:polymorphic_resource_path)
+                             resource.polymorphic_resource_path(resource_url_params)
+                           else
+                             resource_locator.path(resource_url_params)
+                           end
       end
 
       # Caches the URL for the given resource.
       def resource_url
-        @resource_url ||= begin
-          if resource&.respond_to?(:polymorphic_resource_url)
-            resource.polymorphic_resource_url(resource_url_params)
-          else
-            resource_locator.url(resource_url_params)
-          end
-        end
+        @resource_url ||= if resource.respond_to?(:polymorphic_resource_url)
+                            resource.polymorphic_resource_url(resource_url_params)
+                          else
+                            resource_locator.url(resource_url_params)
+                          end
       end
 
       def resource_text; end

data/lib/decidim/events/simple_event.rb

@@ -13,6 +13,8 @@ module Decidim
       include Decidim::ComponentPathHelper
       include Decidim::SanitizeHelper
 
+      delegate :created_at, to: :resource
+
       class_attribute :i18n_interpolations
       self.i18n_interpolations = []
 
@@ -32,26 +34,25 @@ module Decidim
       end
 
       def email_subject
-        I18n.t("email_subject", email_subject_i18n_options).html_safe
+        I18n.t("email_subject", **email_subject_i18n_options).html_safe
       end
 
       def email_subject_i18n_options
         sanitized_values = { resource_title: decidim_sanitize(resource_title) }
         sanitized_values[:mentioned_proposal_title] = decidim_sanitize(mentioned_proposal_title) if i18n_options.has_key?(:mentioned_proposal_title)
-        sanitized_values[:participatory_space_title] = decidim_sanitize(participatory_space_title) if i18n_options.has_key?(:participatory_space_title)
         i18n_options.merge(sanitized_values)
       end
 
       def email_intro
-        I18n.t("email_intro", i18n_options).html_safe
+        I18n.t("email_intro", **i18n_options).html_safe
       end
 
       def email_outro
-        I18n.t("email_outro", i18n_options).html_safe
+        I18n.t("email_outro", **i18n_options).html_safe
       end
 
       def notification_title
-        I18n.t("notification_title", i18n_options).html_safe
+        I18n.t("notification_title", **i18n_options).html_safe
       end
 
       # Public: The String to use as scope to search for the keys

data/lib/decidim/exporters/export_data.rb

@@ -27,7 +27,7 @@ module Decidim
       #
       # Returns a String with the filename of the export.
       def filename(prefix = "export", options = {})
-        options[:extension] = !options[:extension].nil? ? options[:extension] : true
+        options[:extension] = options[:extension].nil? ? true : options[:extension]
         result = "#{prefix}-#{I18n.l(Time.zone.today, format: :default)}-#{Time.now.seconds_since_midnight.to_i}"
         result += ".#{extension}" if options[:extension]
         result

data/lib/decidim/exporters/export_manifest.rb

@@ -10,7 +10,7 @@ module Decidim
     #
     class ExportManifest
       include ActiveModel::Model
-      include Virtus.model
+      include Decidim::AttributeObject::Model
 
       # A setting to choose if the collection exported by this manifest should
       # be included in the open data export available for all users.
@@ -26,6 +26,7 @@ module Decidim
       # manifest - The parent manifest where this export manifest belongs to.
       #
       def initialize(name, manifest)
+        super()
         @name = name.to_sym
         @manifest = manifest
       end

data/lib/decidim/file_validator_humanizer.rb

@@ -12,6 +12,8 @@ module Decidim
   # another object in case the PassthruValidator is in charge of the
   # validations.
   class FileValidatorHumanizer
+    # record - Form object (e.g. Decidim::AccountForm)
+    # attribute - Form field (e.g. :avatar)
     def initialize(record, attribute)
       @record = record
       @attribute = attribute
@@ -21,7 +23,7 @@ module Decidim
     end
 
     def uploader
-      @uploader ||= passthru_uploader || record.attached_uploader(attribute) || record.send(attribute)
+      @uploader ||= fetch_uploader
     end
 
     def messages
@@ -36,6 +38,14 @@ module Decidim
         )
       end
 
+      if (file_dimensions = max_file_dimensions)
+        messages << I18n.t(
+          "max_file_dimension",
+          resolution: file_dimensions,
+          scope: "decidim.forms.file_validation"
+        )
+      end
+
       if (extensions = extension_allowlist)
         messages << I18n.t(
           "allowed_file_extensions",
@@ -73,6 +83,12 @@ module Decidim
     end
     # rubocop: enable Metrics/CyclomaticComplexity
 
+    def max_file_dimensions
+      return unless uploader.respond_to?(:max_image_height_or_width)
+
+      "#{uploader.max_image_height_or_width}x#{uploader.max_image_height_or_width}"
+    end
+
     def extension_allowlist
       return unless uploader.respond_to?(:extension_allowlist, true)
 
@@ -85,6 +101,13 @@ module Decidim
 
     attr_reader :record, :attribute, :passthru_validator
 
+    def fetch_uploader
+      return passthru_uploader if passthru_uploader.present?
+      return record.attached_uploader(attribute) if record.respond_to?(:attached_uploader) && record.attached_uploader(attribute).present?
+
+      record.send(attribute)
+    end
+
     def passthru_record
       return unless passthru_validator