decidim-core 0.28.5 → 0.29.0.rc1

data/app/cells/decidim/content_blocks/cta/show.erb

@@ -1,12 +0,0 @@
-<section id="hero-<%= model.id %>" class="hero__container" style="--hero-image:url('<%= background_image %>')" data-process-hero>
-  <div class="hero">
-    <h1 class="hero__title">
-      <%= translated_description %>
-    </h1>
-
-    <%= link_to button_url, class: "button button__lg md:button__xl button__secondary" do %>
-      <span><%= translated_button_text %></span>
-      <%= icon "login-box-line" %>
-    <% end %>
-  </div>
-</section>

data/app/cells/decidim/content_blocks/cta_cell.rb

@@ -1,31 +0,0 @@
-# frozen_string_literal: true
-
-module Decidim
-  module ContentBlocks
-    class CtaCell < Decidim::ViewModel
-      include Decidim::SanitizeHelper
-
-      def show
-        return if button_url.blank?
-
-        render
-      end
-
-      def translated_button_text
-        @translated_button_text ||= translated_attribute(model.settings.button_text)
-      end
-
-      def translated_description
-        @translated_description ||= decidim_sanitize_editor_admin(translated_attribute(model.settings.description))
-      end
-
-      def button_url
-        @button_url ||= model.settings.button_url
-      end
-
-      def background_image
-        model.images_container.attached_uploader(:background_image).path(variant: :big)
-      end
-    end
-  end
-end

data/app/cells/decidim/footer_pages/pages.erb

@@ -1,3 +0,0 @@
-<% pages.each do |page| %>
-  <%= page_item(page) %>
-<% end %>

data/app/cells/decidim/footer_pages/topics.erb

@@ -1,12 +0,0 @@
-<div class="lg:w-2/3 grid grid-cols-2 gap-x-4 gap-y-10 lg:grid-cols-4 text-md text-white">
-  <% pages.each do |topic| %>
-    <nav role="navigation" aria-label="<%= topic[:title] %>">
-      <h2 class="h5 mb-4"><%= topic[:title] %></h2>
-      <ul class="space-y-4 break-inside-avoid">
-        <% topic[:pages].each do |page| %>
-          <%= page_item(page, class: "font-semibold underline") %>
-        <% end %>
-      </ul>
-    </nav>
-  <% end %>
-</div>

data/app/cells/decidim/footer_pages_cell.rb

@@ -1,68 +0,0 @@
-# frozen_string_literal: true
-
-require "cell/partial"
-
-module Decidim
-  # This cell renders the pages in the footer. It has 2 types of pages with
-  # different layouts:
-  # * Pages of topics: To appear in the footer both the topic and the page must
-  #   be marked to appear in footer. The topic will be shown as the title and
-  #   all the pages marked will appear below
-  # * Pages without topic. The pages marked to appear in footer which do not
-  #   belong to a topic will be shown as a list
-  #
-  # Example:
-  #
-  #    cell("decidim/footer_pages", :topics)
-  class FooterPagesCell < Decidim::ViewModel
-    include ApplicationHelper
-
-    OPTIONS = [:topics, :pages].freeze
-
-    def show
-      return unless model.present? && OPTIONS.include?(model.to_sym)
-      return if pages.blank?
-
-      render model
-    end
-
-    private
-
-    def pages
-      @pages = case model.to_sym
-               when :topics
-                 organization_topics
-               when :pages
-                 organization_pages
-               end
-    end
-
-    def organization_pages
-      current_organization
-        .static_pages_accessible_for(current_user)
-        .where(show_in_footer: true, topic_id: nil)
-        .where.not(slug: "terms-and-conditions").map do |page|
-        { title: decidim_escape_translated(page.title), path: decidim.page_path(page) }
-      end
-    end
-
-    def organization_topics
-      current_organization.static_page_topics.where(show_in_footer: true).map do |topic|
-        next if (topic_pages = topic.accessible_pages_for(current_user).where(show_in_footer: true)).blank?
-
-        {
-          title: decidim_escape_translated(topic.title),
-          pages: topic_pages.map do |page|
-            { title: decidim_escape_translated(page.title), path: decidim.page_path(page) }
-          end
-        }
-      end.compact
-    end
-
-    def page_item(page_data, opts = {})
-      content_tag(:li, **opts.slice(:class)) do
-        link_to page_data[:title], page_data[:path]
-      end
-    end
-  end
-end

data/app/controllers/concerns/decidim/direct_upload.rb

@@ -1,82 +0,0 @@
-# frozen_string_literal: true
-
-module Decidim
-  module DirectUpload
-    extend ActiveSupport::Concern
-
-    included do
-      include Decidim::NeedsOrganization
-      skip_before_action :verify_organization
-
-      before_action :check_organization!,
-                    :check_authenticated!,
-                    :check_user_belongs_to_organization,
-                    :validate_direct_upload
-    end
-
-    protected
-
-    def validate_direct_upload
-      # We skip the validation if we are in system panel. `current_admin` refers to the main system admin user.
-      return if current_admin.present?
-
-      head :unprocessable_entity unless [
-        maximum_allowed_size.try(:to_i) >= blob_args[:byte_size].try(:to_i),
-        content_types.any? { |pattern| pattern.match?(blob_args[:content_type]) },
-        content_types.any? { |pattern| pattern.match?(MiniMime.lookup_by_extension(extension)&.content_type) },
-        allowed_extensions.any? { |pattern| pattern.match?(extension) }
-      ].all?
-    rescue NoMethodError
-      head :unprocessable_entity
-    end
-
-    def extension
-      File.extname(blob_args[:filename]).delete(".")
-    end
-
-    def maximum_allowed_size
-      current_organization.settings.upload_maximum_file_size
-    end
-
-    def check_organization!
-      head :unauthorized if current_organization.blank? && current_admin.blank?
-    end
-
-    def check_authenticated!
-      head :unauthorized if current_user.blank? && current_admin.blank?
-    end
-
-    def check_user_belongs_to_organization
-      return if current_admin.present?
-
-      head :unauthorized unless current_organization == current_user.organization
-    end
-
-    def allowed_extensions
-      if user_has_elevated_role?
-        current_organization.settings.upload_allowed_file_extensions_admin
-      else
-        current_organization.settings.upload_allowed_file_extensions
-      end
-    end
-
-    def content_types
-      if user_has_elevated_role?
-        current_organization.settings.upload_allowed_content_types_admin
-      else
-        current_organization.settings.upload_allowed_content_types
-      end
-    end
-
-    private
-
-    def user_has_elevated_role?
-      [
-        current_user&.admin?,
-        defined?(Decidim::Assemblies::AssembliesWithUserRole) && Decidim::Assemblies::AssembliesWithUserRole.for(current_user).any?,
-        defined?(Decidim::Conferences::ConferencesWithUserRole) && Decidim::Conferences::ConferencesWithUserRole.for(current_user).any?,
-        defined?(Decidim::ParticipatoryProcessesWithUserRole) && Decidim::ParticipatoryProcessesWithUserRole.for(current_user).any?
-      ].any?
-    end
-  end
-end

data/app/helpers/concerns/decidim/user_role_checker.rb

@@ -1,46 +0,0 @@
-# frozen_string_literal: true
-
-module Decidim
-  module UserRoleChecker
-    # Shared behaviour for signed_in admins
-    extend ActiveSupport::Concern
-
-    private
-
-    def user_has_any_role?(user, participatory_space = nil, broad_check: false)
-      return false unless user
-
-      [
-        user.admin,
-        user.roles.any?,
-        participatory_process_user_role?(user, participatory_space, broad_check:),
-        assembly_user_role?(user, participatory_space, broad_check:),
-        conference_user_role?(user, participatory_space, broad_check:)
-      ].any?
-    end
-
-    def participatory_process_user_role?(user, participatory_process = nil, broad_check: false)
-      return false unless Decidim.module_installed?(:participatory_processes)
-      return Decidim::ParticipatoryProcessUserRole.exists?(user:) if broad_check
-      return false unless participatory_process.is_a?(Decidim::ParticipatoryProcess)
-
-      Decidim::ParticipatoryProcessUserRole.exists?(user:, participatory_process:)
-    end
-
-    def assembly_user_role?(user, assembly = nil, broad_check: false)
-      return false unless Decidim.module_installed?(:assemblies)
-      return Decidim::AssemblyUserRole.exists?(user:) if broad_check
-      return false unless assembly.is_a?(Decidim::Assembly)
-
-      Decidim::AssemblyUserRole.exists?(user:, assembly:)
-    end
-
-    def conference_user_role?(user, conference = nil, broad_check: false)
-      return false unless Decidim.module_installed?(:conferences)
-      return Decidim::ConferenceUserRole.exists?(user:) if broad_check
-      return false unless conference.is_a?(Decidim::Conference)
-
-      Decidim::ConferenceUserRole.exists?(user:, conference:)
-    end
-  end
-end

data/app/packs/src/decidim/remote_tooltips.js

@@ -1,38 +0,0 @@
-import createTooltip from "src/decidim/tooltips"
-
-/**
- * Given the following HTML structure,
- * <span data-remote-tooltip="true" tooltip-url="some url" data-author="true">
- *   <span></span>
- * </span>
- *
- * This function will check if the HTMLElement where is attached to has a child, and will add a data tooltip attribute
- * to the respective child in order to attach the fetched HTML content fetched under a json key as the content of the
- * HTML tooltip. The DOM structure is expected to be like follows:
- *
- * <span data-remote-tooltip="true" tooltip-url="some url" data-author="true">
- *   <span data-tooltip="HTML content from json data field"></span>
- * </span>
- *
- * @param {HTMLElement} node The element holding the initialization data
- * @returns {void}
- */
-export default async function(node) {
-  const container = node.firstElementChild;
-
-  if (container) {
-    const response = await fetch(node.dataset.tooltipUrl, {
-      headers: {
-        "Content-Type": "application/json"
-      }
-    });
-    if (response.ok) {
-      const json = await response.json();
-
-      container.dataset.tooltip = json.data;
-      createTooltip(container);
-    } else {
-      console.error(response.status, response.statusText);
-    }
-  }
-}

data/app/packs/src/decidim/vendor/modernizr.js

@@ -1,5 +0,0 @@
-/* eslint-disable */
-
-/*! modernizr 3.3.1 (Custom Build) | MIT *
- * https://modernizr.com/download/?-setclasses !*/
-!function(n,e,s){function o(n,e){return typeof n===e}function a(){var n,e,s,a,i,l,r;for(var c in f)if(f.hasOwnProperty(c)){if(n=[],e=f[c],e.name&&(n.push(e.name.toLowerCase()),e.options&&e.options.aliases&&e.options.aliases.length))for(s=0;s<e.options.aliases.length;s++)n.push(e.options.aliases[s].toLowerCase());for(a=o(e.fn,"function")?e.fn():e.fn,i=0;i<n.length;i++)l=n[i],r=l.split("."),1===r.length?Modernizr[r[0]]=a:(!Modernizr[r[0]]||Modernizr[r[0]]instanceof Boolean||(Modernizr[r[0]]=new Boolean(Modernizr[r[0]])),Modernizr[r[0]][r[1]]=a),t.push((a?"":"no-")+r.join("-"))}}function i(n){var e=r.className,s=Modernizr._config.classPrefix||"";if(c&&(e=e.baseVal),Modernizr._config.enableJSClass){var o=new RegExp("(^|\\s)"+s+"no-js(\\s|$)");e=e.replace(o,"$1"+s+"js$2")}Modernizr._config.enableClasses&&(e+=" "+s+n.join(" "+s),c?r.className.baseVal=e:r.className=e)}var t=[],f=[],l={_version:"3.3.1",_config:{classPrefix:"",enableClasses:!0,enableJSClass:!0,usePrefixes:!0},_q:[],on:function(n,e){var s=this;setTimeout(function(){e(s[n])},0)},addTest:function(n,e,s){f.push({name:n,fn:e,options:s})},addAsyncTest:function(n){f.push({name:null,fn:n})}},Modernizr=function(){};Modernizr.prototype=l,Modernizr=new Modernizr;var r=e.documentElement,c="svg"===r.nodeName.toLowerCase();a(),i(t),delete l.addTest,delete l.addAsyncTest;for(var u=0;u<Modernizr._q.length;u++)Modernizr._q[u]();n.Modernizr=Modernizr}(window,document);

data/app/queries/decidim/similar_emendations.rb

@@ -1,56 +0,0 @@
-# frozen_string_literal: true
-
-module Decidim
-  # Class used to retrieve similar emendations, scoped to the current component.
-  class SimilarEmendations < Decidim::Query
-    include Decidim::TranslationsHelper
-
-    # Syntactic sugar to initialize the class and return the queried objects.
-    #
-    # amendment - Decidim::Amendment
-    def self.for(amendment)
-      new(amendment).query
-    end
-
-    # Initializes the class.
-    #
-    # amendment - Decidim::Amendment
-    def initialize(amendment)
-      @component = amendment.amendable.component
-      @emendation = amendment.emendation
-      @amender = amendment.amender
-    end
-
-    # Retrieves similar emendations
-    def query
-      emendation.class
-                .where(component:)
-                .only_visible_emendations_for(amender, component)
-                .published
-                .not_hidden
-                .where(
-                  Arel.sql("GREATEST(#{title_similarity}, #{body_similarity}) >= ?").to_s,
-                  translated_attribute(emendation.title),
-                  translated_attribute(emendation.body),
-                  amendable_module.similarity_threshold
-                )
-                .limit(amendable_module.similarity_limit)
-    end
-
-    private
-
-    attr_reader :component, :emendation, :amender
-
-    def amendable_module
-      emendation.class.module_parent
-    end
-
-    def title_similarity
-      "similarity(title::text, ?)"
-    end
-
-    def body_similarity
-      "similarity(body::text, ?)"
-    end
-  end
-end

data/app/uploaders/decidim/cw/application_uploader.rb

@@ -1,77 +0,0 @@
-# frozen_string_literal: true
-
-module Decidim::Cw
-  # This class deals with uploading files to Decidim. It is intended to just
-  # hold the uploads configuration, so you should inherit from this class and
-  # then tweak any configuration you need.
-  class ApplicationUploader < CarrierWave::Uploader::Base
-    include CarrierWave::MiniMagick
-    attr_reader :validable_dimensions
-
-    delegate :variants, to: :class
-
-    # Override the directory where uploaded files will be stored.
-    # This is a sensible default for uploaders that are meant to be mounted:
-    def store_dir
-      default_path = "uploads/#{model.class.to_s.underscore}/#{mounted_as}/#{model.id}"
-
-      return File.join(Decidim.base_uploads_path, default_path) if Decidim.base_uploads_path.present?
-
-      default_path
-    end
-
-    # As of Carrierwave 2.0 fog_provider method has been deprecated, and is throwing RuntimeError
-    # RuntimeError: Carrierwave fog_provider not supported: DEPRECATION WARNING: #fog_provider is deprecated...
-    # We are attempting to fetch the provider from credentials, if not we consider to be file
-    def provider
-      fog_credentials.fetch(:provider, "file").downcase
-    end
-
-    # We overwrite the downloader to be able to fetch some elements from URL.
-    def downloader
-      Decidim::Downloader
-    end
-
-    def variant(key)
-      if key && variants[key].present?
-        model.send(mounted_as).variant(variants[key])
-      else
-        model.send(mounted_as)
-      end
-    end
-
-    protected
-
-    # Checks if the file is an image based on the content type. We need this so
-    # we only create different versions of the file when it is an image.
-    #
-    # new_file - The uploaded file.
-    #
-    # Returns a Boolean.
-    def image?(new_file)
-      content_type = model.try(:content_type) || new_file.content_type
-      content_type.to_s.start_with? "image"
-    end
-
-    class << self
-      # Each class inherits variants from parents and can define their own
-      # variants with the set_variants class method which calss the version
-      # CarrierWave macro to define versions from variants
-      def variants
-        @variants ||= superclass.respond_to?(:variants) ? superclass.variants.dup : {}
-      end
-
-      def set_variants
-        return unless block_given?
-
-        variants.merge!(yield)
-
-        variants.each do |key, value|
-          version key, if: :image? do
-            process value
-          end
-        end
-      end
-    end
-  end
-end

data/app/uploaders/decidim/cw/attachment_uploader.rb

@@ -1,56 +0,0 @@
-# frozen_string_literal: true
-
-module Decidim::Cw
-  # This class deals with uploading attachments to a participatory space.
-  class AttachmentUploader < ApplicationUploader
-    process :validate_dimensions
-    process :strip
-
-    def validable_dimensions
-      true
-    end
-
-    set_variants do
-      {
-        thumbnail: { resize_to_fit: [nil, 237] },
-        big: { resize_to_limit: [nil, 1000] }
-      }
-    end
-
-    def max_image_height_or_width
-      8000
-    end
-
-    protected
-
-    # Strips out all embedded information from the image
-    def strip
-      return unless image?(self)
-
-      manipulate! do |img|
-        img.strip
-        img
-      end
-    end
-
-    def upload_context
-      return :participant unless model.respond_to?(:context)
-
-      model.context
-    end
-
-    # A simple check to avoid DoS with maliciously crafted images, or just to
-    # avoid reckless users that upload gigapixels images.
-    #
-    # See https://hackerone.com/reports/390
-    def validate_dimensions
-      return unless image?(self)
-
-      manipulate! do |image|
-        raise CarrierWave::IntegrityError, I18n.t("carrierwave.errors.file_resolution_too_large") if image.dimensions.any? { |dimension| dimension > max_image_height_or_width }
-
-        image
-      end
-    end
-  end
-end

data/app/uploaders/decidim/cw/avatar_uploader.rb

@@ -1,24 +0,0 @@
-# frozen_string_literal: true
-
-module Decidim::Cw
-  # This class deals with uploading avatars to a User.
-  class AvatarUploader < ImageUploader
-    set_variants do
-      {
-        profile: { resize_to_fill: [536, 640] },
-        big: { resize_to_fit: [80, 80] },
-        thumb: { resize_to_fit: [40, 40] }
-      }
-    end
-
-    process :validate_dimensions
-
-    def default_url(*)
-      ActionController::Base.helpers.asset_path("decidim/default-avatar.svg")
-    end
-
-    def default_multiuser_url(*)
-      ActionController::Base.helpers.asset_path("decidim/avatar-multiuser.png")
-    end
-  end
-end

data/app/uploaders/decidim/cw/banner_image_uploader.rb

@@ -1,7 +0,0 @@
-# frozen_string_literal: true
-
-module Decidim::Cw
-  # This class deals with uploading banner images to ParticipatoryProcesses.
-  class BannerImageUploader < RecordImageUploader
-  end
-end

data/app/uploaders/decidim/cw/download_your_data_uploader.rb

@@ -1,15 +0,0 @@
-# frozen_string_literal: true
-
-module Decidim::Cw
-  # This class deals with saving download your data Zip Files to App
-  class DownloadYourDataUploader < ApplicationUploader
-    # Override the directory where uploaded files will be stored.
-    def store_dir
-      default_path = "uploads/download-your-data/"
-
-      return File.join(Decidim.base_uploads_path, default_path) if Decidim.base_uploads_path.present?
-
-      default_path
-    end
-  end
-end

data/app/uploaders/decidim/cw/downloader.rb

@@ -1,9 +0,0 @@
-# frozen_string_literal: true
-
-module Decidim::Cw
-  class Downloader < CarrierWave::Downloader::Base
-    def skip_ssrf_protection?(_uri)
-      true
-    end
-  end
-end

data/app/uploaders/decidim/cw/hero_image_uploader.rb

@@ -1,10 +0,0 @@
-# frozen_string_literal: true
-
-module Decidim::Cw
-  # This class deals with uploading hero images to ParticipatoryProcesses.
-  class HeroImageUploader < RecordImageUploader
-    set_variants do
-      { default: { resize_to_fit: [1000, 1000] } }
-    end
-  end
-end

data/app/uploaders/decidim/cw/homepage_image_uploader.rb

@@ -1,14 +0,0 @@
-# frozen_string_literal: true
-
-module Decidim::Cw
-  # This class deals with uploading hero images to organizations.
-  class HomepageImageUploader < RecordImageUploader
-    set_variants do
-      { big: { resize_to_fill: [1920, 666] } }
-    end
-
-    def max_image_height_or_width
-      8000
-    end
-  end
-end

data/app/uploaders/decidim/cw/image_uploader.rb

@@ -1,78 +0,0 @@
-# frozen_string_literal: true
-
-module Decidim::Cw
-  # This class deals with uploading hero images to ParticipatoryProcesses.
-  class ImageUploader < ApplicationUploader
-    process :validate_size, :validate_dimensions, :strip
-    process quality: Decidim.image_uploader_quality
-
-    def validable_dimensions
-      true
-    end
-
-    # CarrierWave automatically calls this method and validates the content
-    # type fo the temp file to match against any of these options.
-    def content_type_allowlist
-      extension_allowlist.map { |ext| "image/#{ext}" }
-    end
-
-    # Strips out all embedded information from the image
-    def strip
-      manipulate! do |img|
-        img.strip
-        img
-      end
-    end
-
-    # Fetches info about different variants, their processors and dimensions
-    def dimensions_info
-      return if variants.blank?
-
-      variants.transform_values do |variant|
-        {
-          processor: variant.keys.first,
-          dimensions: variant.values.first
-        }
-      end
-    end
-
-    # Add a white list of extensions which are allowed to be uploaded.
-    # For images you might use something like this:
-    def extension_allowlist
-      Decidim.organization_settings(model).upload_allowed_file_extensions_image
-    end
-
-    # A simple check to avoid DoS with maliciously crafted images, or just to
-    # avoid reckless users that upload gigapixels images.
-    #
-    # See https://hackerone.com/reports/390
-    def validate_dimensions
-      manipulate! do |image|
-        validation_error!(I18n.t("carrierwave.errors.file_resolution_too_large")) if image.dimensions.any? { |dimension| dimension > max_image_height_or_width }
-        image
-      end
-    end
-
-    def validate_size
-      manipulate! do |image|
-        validation_error!(I18n.t("carrierwave.errors.file_size_too_large")) if image.size > maximum_upload_size
-        image
-      end
-    end
-
-    def max_image_height_or_width
-      3840
-    end
-
-    private
-
-    def validation_error!(text)
-      model.errors.add(mounted_as, text)
-      raise CarrierWave::IntegrityError, text
-    end
-
-    def maximum_upload_size
-      Decidim.organization_settings(model).upload_maximum_file_size
-    end
-  end
-end