decidim-core 0.30.7 → 0.30.9

data/app/packs/src/decidim/datepicker/test/datepicker_functions_adjust_picker_position.test.js

@@ -0,0 +1,234 @@
+/* global jest */
+
+import { adjustPickerPosition } from "src/decidim/datepicker/datepicker_functions";
+
+describe("adjustDatePickerPosition", () => {
+  let input = null;
+  let parent = null;
+  let datePickerContainer = null;
+
+  let originalInnerHeight = window.innerHeight;
+
+  beforeEach(() => {
+    // Setup DOM structure
+    parent = document.createElement("div");
+    parent.className = "datepicker__date-column";
+    document.body.appendChild(parent);
+
+    input = document.createElement("input");
+    Reflect.defineProperty(input, "offsetHeight", {
+      configurable: true,
+      value: 40
+    });
+    parent.appendChild(input);
+
+    datePickerContainer = document.createElement("div");
+    datePickerContainer.className = "datepicker__container";
+    parent.appendChild(datePickerContainer);
+
+    // Mock offsetHeight for calendar
+    Reflect.defineProperty(datePickerContainer, "offsetHeight", {
+      configurable: true,
+      value: 300
+    });
+
+    // store original viewport height
+    originalInnerHeight = window.innerHeight;
+  });
+
+  afterEach(() => {
+    document.body.removeChild(parent);
+
+    Reflect.defineProperty(window, "innerHeight", {
+      writable: true,
+      configurable: true,
+      value: originalInnerHeight
+    });
+
+    jest.restoreAllMocks();
+  });
+
+  it("sets parent position to relative when static", () => {
+    parent.style.position = "static";
+
+    adjustPickerPosition(input, datePickerContainer, ".datepicker__date-column");
+
+    expect(parent.style.position).toBe("relative");
+  });
+
+  it("does not change parent position when already positioned", () => {
+    parent.style.position = "absolute";
+
+    adjustPickerPosition(input, datePickerContainer, ".datepicker__date-column");
+
+    expect(parent.style.position).toBe("absolute");
+  });
+
+  it("opens below when sufficient space below", () => {
+    jest.spyOn(input, "getBoundingClientRect").mockReturnValue({
+      top: 100,
+      bottom: 140
+    });
+
+    Reflect.defineProperty(window, "innerHeight", {
+      writable: true,
+      configurable: true,
+      value: 800
+    });
+
+    adjustPickerPosition(input, datePickerContainer, ".datepicker__date-column");
+
+    expect(datePickerContainer.style.top).toBe("40px");
+    expect(datePickerContainer.style.bottom).toBe("");
+  });
+
+  it("opens above when insufficient space below", () => {
+    jest.spyOn(input, "getBoundingClientRect").mockReturnValue({
+      top: 400,
+      bottom: 440
+    });
+
+    Reflect.defineProperty(window, "innerHeight", {
+      writable: true,
+      configurable: true,
+      value: 500
+    });
+
+    adjustPickerPosition(input, datePickerContainer, ".datepicker__date-column");
+
+    expect(datePickerContainer.style.top).toBe("");
+    expect(datePickerContainer.style.bottom).toBe("40px");
+  });
+
+  it("prefers opening below when space is equal above and below", () => {
+    jest.spyOn(input, "getBoundingClientRect").mockReturnValue({
+      top: 250,
+      bottom: 290
+    });
+
+    Reflect.defineProperty(window, "innerHeight", {
+      writable: true,
+      configurable: true,
+      value: 540
+    });
+
+    adjustPickerPosition(input, datePickerContainer, ".datepicker__date-column");
+
+    expect(datePickerContainer.style.top).toBe("40px");
+    expect(datePickerContainer.style.bottom).toBe("");
+  });
+
+  it("always sets right position to 0px", () => {
+    jest.spyOn(input, "getBoundingClientRect").mockReturnValue({
+      top: 100,
+      bottom: 140
+    });
+
+    adjustPickerPosition(input, datePickerContainer, ".datepicker__date-column");
+
+    expect(datePickerContainer.style.right).toBe("0px");
+  });
+});
+
+
+describe("adjustTimePickerPosition", () => {
+  let input = null;
+  let parent = null;
+  let timePicker = null;
+
+  let originalInnerHeight = window.innerHeight;
+
+  beforeEach(() => {
+    parent = document.createElement("div");
+    parent.className = "datepicker__time-column";
+    document.body.appendChild(parent);
+
+    input = document.createElement("input");
+    Reflect.defineProperty(input, "offsetHeight", {
+      configurable: true,
+      value: 30
+    });
+    parent.appendChild(input);
+
+    timePicker = document.createElement("div");
+    timePicker.className = "timepicker__container";
+    parent.appendChild(timePicker);
+
+    Reflect.defineProperty(timePicker, "offsetHeight", {
+      configurable: true,
+      value: 200
+    });
+
+    // store original value before any test mutates it
+    originalInnerHeight = window.innerHeight;
+  });
+
+  afterEach(() => {
+    // restore DOM
+    document.body.removeChild(parent);
+
+    // restore window.innerHeight (fix for CodeRabbit warning)
+    Reflect.defineProperty(window, "innerHeight", {
+      writable: true,
+      configurable: true,
+      value: originalInnerHeight
+    });
+
+    jest.restoreAllMocks();
+  });
+
+  it("sets parent position to relative when static", () => {
+    parent.style.position = "static";
+
+    adjustPickerPosition(input, timePicker, ".datepicker__time-column");
+
+    expect(parent.style.position).toBe("relative");
+  });
+
+  it("opens below when there is enough space", () => {
+    jest.spyOn(input, "getBoundingClientRect").mockReturnValue({
+      top: 100,
+      bottom: 130
+    });
+
+    Reflect.defineProperty(window, "innerHeight", {
+      writable: true,
+      configurable: true,
+      value: 700
+    });
+
+    adjustPickerPosition(input, timePicker, ".datepicker__time-column");
+
+    expect(timePicker.style.top).toBe("30px");
+    expect(timePicker.style.bottom).toBe("");
+  });
+
+  it("opens above when there is not enough space below", () => {
+    jest.spyOn(input, "getBoundingClientRect").mockReturnValue({
+      top: 400,
+      bottom: 430
+    });
+
+    Reflect.defineProperty(window, "innerHeight", {
+      writable: true,
+      configurable: true,
+      value: 500
+    });
+
+    adjustPickerPosition(input, timePicker, ".datepicker__time-column");
+
+    expect(timePicker.style.top).toBe("");
+    expect(timePicker.style.bottom).toBe("30px");
+  });
+
+  it("always aligns to the right", () => {
+    jest.spyOn(input, "getBoundingClientRect").mockReturnValue({
+      top: 100,
+      bottom: 130
+    });
+
+    adjustPickerPosition(input, timePicker, ".datepicker__time-column");
+
+    expect(timePicker.style.right).toBe("0px");
+  });
+});

data/app/packs/src/decidim/sw/push-permissions.js

@@ -2,15 +2,37 @@ window.addEventListener("DOMContentLoaded", async () => {
   const GRANTED_PERMISSION = "granted"
 
   const hideReminder = function() {
-    const reminder = document.querySelector("#push-notifications-reminder")
+    const reminder = document.querySelector("[data-push-notifications-reminder]")
+    if (!reminder) {
+      return;
+    }
+
     reminder.classList.add("hide")
   }
 
+  const showError = (message) => {
+    const container = document.querySelector("[data-push-notifications-container]")
+    if (!container) {
+      return;
+    }
+
+    const existingError = container.querySelector("[data-push-notifications-error]")
+    if (existingError) {
+      existingError.remove()
+    }
+
+    const errorElement = document.createElement("div")
+    errorElement.dataset.pushNotificationsError = "true"
+    errorElement.classList.add("flash", "alert", "push-notifications__error")
+    errorElement.innerText = message
+    container.prepend(errorElement)
+  }
+
   const subscribeToNotifications = async (registration) => {
     const permission = await window.Notification.requestPermission();
 
     if (registration && permission === GRANTED_PERMISSION) {
-      const vapidElement = document.querySelector("#vapidPublicKey")
+      const vapidElement = document.querySelector("[data-push-vapid-public-key]")
       // element could not exist in DOM
       if (vapidElement) {
         const vapidPublicKeyElement = JSON.parse(vapidElement.value)
@@ -20,7 +42,7 @@ window.addEventListener("DOMContentLoaded", async () => {
         });
 
         if (subscription) {
-          await fetch("/notifications_subscriptions", {
+          const response = await fetch("/notifications_subscriptions", {
             headers: {
               "Content-Type": "application/json",
               "X-CSRF-Token": document.querySelector("meta[name=csrf-token]")?.content
@@ -28,6 +50,11 @@ window.addEventListener("DOMContentLoaded", async () => {
             method: "POST",
             body: JSON.stringify(subscription)
           });
+
+          if (!response.ok) {
+            const body = await response.json()
+            throw new Error(body.error)
+          }
         }
       }
       hideReminder()
@@ -57,10 +84,13 @@ window.addEventListener("DOMContentLoaded", async () => {
       hideReminder()
       if (currentSubscription) {
         const auth = currentSubscription.toJSON().keys.auth
-        const subKeys = JSON.parse(document.querySelector("#subKeys").value)
-        // Subscribed && browser notifications enabled
-        if (subKeys.includes(auth)) {
-          toggleChecked = true
+        const subKeysElement = document.querySelector("[data-push-sub-keys]")
+        if (subKeysElement) {
+          const subKeys = JSON.parse(subKeysElement.value)
+          // Subscribed && browser notifications enabled
+          if (subKeys.includes(auth)) {
+            toggleChecked = true
+          }
         }
       }
     }
@@ -68,7 +98,7 @@ window.addEventListener("DOMContentLoaded", async () => {
   }
 
   if ("serviceWorker" in navigator) {
-    const toggle = document.getElementById("allow_push_notifications")
+    const toggle = document.querySelector("[data-push-notifications-toggle]")
 
     if (toggle) {
       const registration = await navigator.serviceWorker.ready
@@ -76,10 +106,15 @@ window.addEventListener("DOMContentLoaded", async () => {
       setToggleState(registration, toggle)
 
       toggle.addEventListener("change", async ({ target }) => {
-        if (target.checked) {
-          await subscribeToNotifications(registration);
-        } else {
-          await unsubscribeFromNotifications(registration)
+        try {
+          if (target.checked) {
+            await subscribeToNotifications(registration)
+          } else {
+            await unsubscribeFromNotifications(registration)
+          }
+        } catch (error) {
+          target.checked = false
+          showError(error.message)
         }
       })
     }

data/app/presenters/decidim/menu_item_presenter.rb

@@ -26,7 +26,7 @@ module Decidim
     delegate :content_tag, :safe_join, :link_to, :active_link_to_class, :is_active_link?, :icon, to: :@view
 
     def render
-      content_tag :li, role: :menuitem, class: link_wrapper_classes do
+      content_tag :li, role: menuitem_role, class: link_wrapper_classes do
         output = if url == "#"
                    [content_tag(:span, composed_label, class: "sidebar-menu__item-disabled")]
                  else
@@ -62,6 +62,12 @@ module Decidim
       [@options.element_class, active_class].compact.join(" ")
     end
 
+    def menuitem_role
+      return if @options.role == false
+
+      @options.role || :menuitem
+    end
+
     def active_class
       active_link_to_class(
         url,

data/app/services/decidim/notifications_subscriptions_persistor.rb

@@ -4,6 +4,10 @@ module Decidim
   # This class manages the creation and deletion of user notifications
 
   class NotificationsSubscriptionsPersistor
+    include PushSubscriptionEndpointValidator
+
+    class UnsupportedPushSubscriptionEndpointError < StandardError; end
+
     attr_reader :user
 
     def initialize(user)
@@ -11,6 +15,8 @@ module Decidim
     end
 
     def add_subscription(params)
+      raise UnsupportedPushSubscriptionEndpointError unless supported_push_subscription_endpoint?(params[:endpoint])
+
       subscriptions = user.notification_settings["subscriptions"] || {}
       filtered_params = filter_params(params)
       new_subscription = { filtered_params[:auth] => filtered_params }

data/app/services/decidim/push_subscription_endpoint_validator.rb

@@ -0,0 +1,34 @@
+# frozen_string_literal: true
+
+module Decidim
+  # Shared validation for browser push subscription endpoints.
+  module PushSubscriptionEndpointValidator
+    private
+
+    def supported_push_subscription_endpoint?(endpoint)
+      return false if endpoint.blank?
+
+      uri = URI.parse(endpoint)
+      return false unless uri.is_a?(URI::HTTPS)
+
+      host = uri.host&.downcase
+      return false if host.blank?
+
+      allowed_push_subscription_endpoint_patterns.any? { |pattern| pattern.match?(host) }
+    rescue URI::InvalidURIError
+      false
+    end
+
+    # Override this method to customize the browser push endpoint allowlist.
+    def allowed_push_subscription_endpoint_patterns
+      [
+        /\A(?:.*\.)?push\.services\.mozilla\.com\z/,
+        /\A(?:.*\.)?fcm\.googleapis\.com\z/,
+        /\A(?:.*\.)?android\.googleapis\.com\z/,
+        /\A(?:.*\.)?push\.apple\.com\z/,
+        /\A(?:.*\.)?opera\.com\z/,
+        /\A(?:.*\.)?notify\.windows\.com\z/
+      ]
+    end
+  end
+end

data/app/services/decidim/send_push_notification.rb

@@ -10,6 +10,7 @@ module Decidim
 
   class SendPushNotification
     include ActionView::Helpers::UrlHelper
+    include PushSubscriptionEndpointValidator
 
     # Send the push notification. Returns `nil` if the user did not allowed push notifications
     # or if the subscription to push notifications does not exist
@@ -23,9 +24,12 @@ module Decidim
       raise ArgumentError, "Need to provide a title if the notification is a PushNotificationMessage" if notification.is_a?(Decidim::PushNotificationMessage) && title.nil?
 
       user = notification.user
+      subscriptions = user.notifications_subscriptions.values.select do |subscription|
+        supported_push_subscription_endpoint?(subscription["endpoint"])
+      end
 
       I18n.with_locale(user.locale || user.organization.default_locale) do
-        user.notifications_subscriptions.values.map do |subscription|
+        subscriptions.map do |subscription|
           payload = build_payload(message_params(notification, title), subscription)
           # Capture webpush exceptions in order to avoid this call to be repeated by the background job runner
           # Webpush::Error class is the parent class of all defined errors

data/app/views/decidim/devise/registrations/new.html.erb

@@ -34,6 +34,7 @@
       <%= f.text_field :name, help_text: t("decidim.devise.registrations.new.username_help"), autocomplete: "name", placeholder: "John Doe" %>
 
       <%= f.email_field :email, autocomplete: "email", placeholder: t("placeholder_email", scope: "decidim.devise.shared") %>
+      <span class="sr-only"><%= t("placeholder_email", scope: "decidim.devise.shared") %></span>
 
       <%= render partial: "decidim/account/password_fields", locals: { form: f, user: :user } %>
     </div>

data/app/views/decidim/devise/shared/_tos_fields.html.erb

@@ -1,13 +1,13 @@
 <div id="card__tos" class="form__wrapper-block border-y-2">
   <h2 class="h4"><%= t("decidim.devise.registrations.new.tos_title") %></h2>
+  <span class="sr-only"><%= t("forms.required") %></span>
 
-  <div>
+  <div id="terms_of_service_summary">
     <% terms_of_service_summary_content_blocks.each do |content_block| %>
       <%= cell content_block.manifest.cell, content_block %>
     <% end %>
   </div>
-
-  <%= form.check_box :tos_agreement, label: t("decidim.devise.registrations.new.tos_agreement", link: link_to(t("decidim.devise.registrations.new.terms"), decidim.page_path("terms-of-service"))), label_options: { class: "form__wrapper-checkbox-label" } %>
+  <%= form.check_box :tos_agreement, label: t("decidim.devise.registrations.new.tos_agreement", link: link_to(t("decidim.devise.registrations.new.terms"), decidim.page_path("terms-of-service"))), label_options: { class: "form__wrapper-checkbox-label" }, "aria-describedby": "terms_of_service_summary" %>
 </div>
 
 <div id="card__newsletter" class="form__wrapper-block">

data/app/views/decidim/notification_mailer/event_received.html.erb

@@ -15,7 +15,7 @@
 
   <blockquote>
     <p>
-      <%= @event_instance.safe_resource_text %>
+      <%= decidim_transform_image_urls(@event_instance.safe_resource_text, @organization.host).html_safe %>
     </p>
   </blockquote>
 <% end %>
@@ -28,7 +28,7 @@
   <p style="font-weight: bold"><%= t(".translated_text") %></p>
   <blockquote>
     <p>
-      <%= @event_instance.safe_resource_translated_text %>
+      <%= decidim_transform_image_urls(@event_instance.safe_resource_translated_text, @organization.host).html_safe %>
     </p>
   </blockquote>
 <% end %>
@@ -40,7 +40,7 @@
         <table>
           <tr>
             <td>
-              <%= link_to @event_instance.button_text, @event_instance.button_url, target: :blank %>
+              <%= link_to decidim_sanitize(@event_instance.button_text, strip_tags: true), @event_instance.button_url, target: :blank %>
             </td>
           </tr>
         </table>

data/app/views/decidim/notifications_settings/show.html.erb

@@ -167,20 +167,20 @@
       <% end %>
 
       <% if @notifications_settings.meet_push_notifications_requirements? %>
-        <div class="push-notifications js-sw-mandatory">
+        <div class="push-notifications js-sw-mandatory" data-push-notifications-container>
           <label>
             <%= t("push_notifications", scope: "decidim.notifications_settings.show") %>
           </label>
-          <p id="push-notifications-reminder" class="push-notifications__reminder block my-4">
+          <p id="push-notifications-reminder" class="push-notifications__reminder block my-4" data-push-notifications-reminder>
             <%= t("push_notifications_reminder", scope: "decidim.notifications_settings.show") %>
           </p>
           <div class="toggle__switch-trigger">
             <label class="toggle__switch-toggle" for="allow_push_notifications">
               <span>
                 <input
-                  <%== %(checked="checked") if @notifications_settings.meet_push_notifications_requirements? %>
                   id="allow_push_notifications"
                   type="checkbox"
+                  data-push-notifications-toggle
                   name="allow_push_notifications">
                 <span class="toggle__switch-toggle-content">
                 </span>
@@ -194,8 +194,8 @@
           </div>
         </div>
 
-        <input id="vapidPublicKey" name="vapid_public_key" type="hidden" value="<%= Base64.urlsafe_decode64(Rails.application.secrets.vapid[:public_key]).bytes %>">
-        <input id="subKeys" name="sub_key" type="hidden" value="<%= current_user.notifications_subscriptions.keys %>">
+        <input id="vapidPublicKey" name="vapid_public_key" data-push-vapid-public-key type="hidden" value="<%= Base64.urlsafe_decode64(Rails.application.secrets.vapid[:public_key]).bytes.to_json %>">
+        <input id="subKeys" name="sub_key" data-push-sub-keys type="hidden" value="<%= current_user.notifications_subscriptions.keys.to_json %>">
       <% end %>
 
       <div class="form__wrapper-block">

data/config/locales/ca-IT.yml

@@ -1525,6 +1525,7 @@ ca-IT:
         own_activity: La meva pròpia activitat, com quan algú fa comentaris a la meva proposta o em menciona
         push_notifications: Notificacions emergents
         push_notifications_reminder: Per rebre notificacions de la plataforma, primer les has de permetre a la configuració del teu navegador.
+        push_notifications_unsupported_browser: El navegador no és compatible.
         receive_notifications_about: Vull rebre notificacions
         update_notifications_settings: Guardar canvis
         valuators: Avaluadores

data/config/locales/ca.yml

@@ -1525,6 +1525,7 @@ ca:
         own_activity: La meva pròpia activitat, com quan algú fa comentaris a la meva proposta o em menciona
         push_notifications: Notificacions emergents
         push_notifications_reminder: Per rebre notificacions de la plataforma, primer les has de permetre a la configuració del teu navegador.
+        push_notifications_unsupported_browser: El navegador no és compatible.
         receive_notifications_about: Vull rebre notificacions
         update_notifications_settings: Guardar canvis
         valuators: Avaluadores

data/config/locales/cs.yml

@@ -844,6 +844,7 @@ cs:
           delete_reason: Důvod pro odstranění tohoto uživatele
           deleted_at: Datum a čas, kdy byl tento uživatel odstraněn
           email: E-mailová adresa tohoto uživatele
+          followers_count: Počet účastníků, kteří sledují tohoto uživatele
           following_count: Počet účastníků, které tento uživatel sleduje
           id: Jedinečný identifikátor tohoto uživatele
           invitation_accepted_at: Datum a čas, kdy byla pozvánka přijata
@@ -1214,6 +1215,9 @@ cs:
       actions:
         confirm_modal:
           ok_add: Přidat administrátora
+          ok_remove: Odstranit správce
+          title_add: Potvrdit nového správce
+          title_remove: Odstranit správce
         demote_admin: Odstranit admin
       demote:
         error: Při odebrání tohoto účastníka ze seznamu administrátorů došlo k chybě.
@@ -1328,6 +1332,7 @@ cs:
         create_with_space: "%{user_name} vytvořil %{resource_name} v %{space_name}"
         delete: "%{user_name} odstraněno %{resource_name}"
         delete_with_space: "%{user_name} smazán %{resource_name} v %{space_name}"
+        publish: "%{user_name} publikoval %{resource_name}"
         publish_with_space: "%{user_name} publikoval %{resource_name} v %{space_name}"
         unknown_action: "%{user_name} provedla nějakou akci na %{resource_name}"
         unknown_action_with_space: "%{user_name} provedlo nějakou akci na %{resource_name} v %{space_name}"

data/config/locales/de.yml

@@ -1118,6 +1118,8 @@ de:
           explanation: 'Anleitung für Bild:'
           message_1: Vorzugsweise ein Bild im Querformat, das keinen Text enthält.
           message_2: Der Dienst schneidet die Datei zu.
+        import_file:
+          message_1: Muss ein JSON-Dokument sein, das über die Exportfunktion heruntergeladen wurde.
       file_validation:
         allowed_file_extensions: 'Erlaubte Dateiformate: %{extensions}'
         max_file_dimension: 'Maximale Dateigröße: %{resolution} Pixel'
@@ -1478,9 +1480,13 @@ de:
         same_language: Der Inhalt wurde in Ihrer bevorzugten Sprache (%{language}) veröffentlicht, daher wird in dieser E-Mail keine automatisierte Übersetzung angezeigt.
         translated_text: 'Automatisch übersetzter Text:'
     notifications:
+      action_error: Beim Aktualisieren der Benachrichtigungseinstellungen ist ein Fehler aufgetreten.
       no_notifications: Noch keine Benachrichtigungen
       show:
+        deleted: Inhalt wurde vom Autor gelöscht.
         missing_event: Hoppla, diese Benachrichtigung gehört zu einem Artikel, der nicht mehr verfügbar ist. Du kannst sie verwerfen.
+        moderated: Inhalt wurde durch Moderation versteckt.
+        not_available: Hoppla, diese Benachrichtigung gehört zu einem Artikel, der nicht mehr verfügbar ist. Es ist keine weitere Aktion erforderlich.
     notifications_digest_mailer:
       header:
         daily: Tägliche Zusammenfassung
@@ -1489,6 +1495,7 @@ de:
       hello: Hallo %{name}
       intro:
         daily: 'Dies sind die Benachrichtigungen vom letzten Tag basierend auf den Aktivitäten, denen Sie folgen:'
+        real_time: 'Es gibt eine Benachrichtigung über die Aktivität, die Sie folgen:'
         weekly: 'Dies sind die Benachrichtigungen der letzten Woche, basierend auf den Aktivitäten, die Sie folgen:'
       outro: Sie haben diese Benachrichtigung erhalten, weil Sie diesen Inhalt oder seine Verfassenden folgen. Sie können dem Inhalt direkt auf seiner Seite entfolgen.
       see_more: Weitere Benachrichtigungen ansehen
@@ -1642,7 +1649,9 @@ de:
           title: Wie man diese Dateien öffnet und mit ihnen arbeitet
         license:
           body_1_html: Diese Datenbank von %{organization_name} wird unter %{link_database} zur Verfügung gestellt. Alle Rechte an einzelnen Inhalten der Datenbank sind unter %{link_contents} lizenziert.
+          license_contents_link: https://opendatacommons.org/licenses/dbcl/1.0/
           license_contents_name: Lizenz für Datenbankinhalte
+          license_database_link: https://opendatacommons.org/licenses/odbl/1.0/
           license_database_name: Offene Datenbanklizenz
           title: Lizenz
         title: Offene Daten
@@ -1962,6 +1971,7 @@ de:
       send_paranoid_instructions: Wenn Ihre E-Mail-Adresse in unserer Datenbank vorhanden ist, erhalten Sie innerhalb weniger Minuten eine E-Mail mit Anweisungen zur Bestätigung Ihrer E-Mail-Adresse.
     failure:
       already_authenticated: Sie sind bereits angemeldet.
+      csrf_token: Ihre Anfrage konnte nicht verifiziert werden. Bitte versuchen Sie es erneut.
       inactive: Dein Benutzerkonto ist noch nicht aktiviert.
       invalid: Ungültige %{authentication_keys} oder Passwort
       invited: Sie haben eine ausstehende Einladung, akzeptieren Sie sie, um die Erstellung Ihres Kontos abzuschließen.
@@ -1976,6 +1986,7 @@ de:
         nickname_help: Ihr Pseudonym auf %{organization}. Kann nur Buchstaben, Zahlen, '-' und '_' enthalten.
         submit_button: Speichern
         subtitle: Wenn Sie die Einladung annehmen, geben Sie bitte Ihren Kontonamen und Ihr Passwort ein.
+        subtitle_no_password: Wenn Sie die Einladung annehmen, geben Sie bitte Ihren Kontonamen ein.
       invitation_removed: Ihre Einladung wurde entfernt.
       invitation_token_invalid: Das angegebene Einladungstoken ist nicht gültig!
       new:
@@ -1983,6 +1994,8 @@ de:
         submit_button: Eine Einladung schicken
       no_invitations_remaining: Keine Einladungen übrig
       send_instructions: Eine Einladungs-E-Mail wurde an %{email}gesendet.
+      updated: Einladung erfolgreich angenommen. Sie sind jetzt angemeldet.
+      updated_not_active: Einladung erfolgreich angenommen.
     mailer:
       confirmation_instructions:
         action: Konto bestätigen

data/config/locales/en.yml

@@ -1532,6 +1532,7 @@ en:
         own_activity: My own activity, like when someone comments in my proposal or mentions me
         push_notifications: Push notifications
         push_notifications_reminder: To get notifications from the platform, you will need to allow them in your browser settings first.
+        push_notifications_unsupported_browser: Your browser is not supported.
         receive_notifications_about: I want to get notifications about
         update_notifications_settings: Save changes
         valuators: Evaluators

data/config/locales/es-MX.yml

@@ -1528,6 +1528,7 @@ es-MX:
         own_activity: Mi propia actividad, como cuando alguien comenta en mi propuesta o me menciona.
         push_notifications: Notificaciones emergentes
         push_notifications_reminder: Para obtener notificaciones de la plataforma, primero tienes que permitirlas en la configuración de tu navegador.
+        push_notifications_unsupported_browser: Tu navegador no es compatible.
         receive_notifications_about: Quiero recibir notificaciones sobre
         update_notifications_settings: Guardar cambios
         valuators: Evaluadoras

data/config/locales/es-PY.yml

@@ -1528,6 +1528,7 @@ es-PY:
         own_activity: Mi propia actividad, como cuando alguien comenta en mi propuesta o me menciona.
         push_notifications: Notificaciones emergentes
         push_notifications_reminder: Para obtener notificaciones de la plataforma, primero tienes que permitirlas en la configuración de tu navegador.
+        push_notifications_unsupported_browser: Tu navegador no es compatible.
         receive_notifications_about: Quiero recibir notificaciones sobre
         update_notifications_settings: Guardar cambios
         valuators: Evaluadoras