RubyGems - decidim-dev - Versions diffs - 0.32.0 → 0.32.2 - Mend

decidim-dev 0.32.0 → 0.32.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (79) hide show

data/lib/decidim/dev/test/rspec_support/capybara.rb CHANGED Viewed

@@ -27,6 +27,60 @@ module Decidim
       "http"
     end
+    def expire_browser_session(wait: Capybara.default_max_wait_time)
+      wait_pending_requests(wait)
+      travel(Decidim.config.expire_session_after + 1.second) do
+        yield
+      end
+    end
+    # Clear the buffers and background connections by taking the browser to
+    # offline state for a tiny moment. If a block is given, any further commands
+    # can be run during the offline state.
+    def force_browser_offline_state
+      page.driver.browser.execute_cdp(
+        "Network.emulateNetworkConditions",
+        offline: true,
+        latency: 0,
+        downloadThroughput: 0,
+        uploadThroughput: 0
+      )
+      sleep 0.05
+      yield if block_given?
+    ensure
+      page.driver.browser.execute_cdp(
+        "Network.emulateNetworkConditions",
+        offline: false,
+        latency: 0,
+        downloadThroughput: -1,
+        uploadThroughput: -1
+      )
+    end
+    # Waits for any pending requests to finish and clears any active browser
+    # background connections after that.
+    def wait_pending_requests(max_wait_time = Capybara.default_max_wait_time, idle_time: 1)
+      wait_time = 0
+      loop do
+        time_since_last_asset = page.evaluate_script(
+          <<~JS
+            performance.now() - Math.max(...window.performance.getEntriesByType("resource").map((r) => r.responseEnd), 0)
+          JS
+        )
+        break if time_since_last_asset > (idle_time * 1000)
+        remaining_wait_time = max_wait_time - wait_time
+        raise StandardError, "Requests still pending." if remaining_wait_time <= 0
+        sleep_time = [idle_time, remaining_wait_time].min
+        sleep sleep_time
+        wait_time += sleep_time
+      end
+      force_browser_offline_state
+    end
   end
 end

data/lib/decidim/dev/test/rspec_support/editor_context.rb CHANGED Viewed

@@ -17,7 +17,7 @@ shared_context "with editor content containing mentions" do
   def html_mention(mentionable)
     mention = "@#{mentionable.nickname}"
-    label = "#{mention} (#{CGI.escapeHTML(mentionable.name)})"
+    label = mention
     %(<span data-type="mention" data-id="#{mention}" data-label="#{label}">#{label}</span>)
   end
 end

data/lib/decidim/dev/test/rspec_support/helpers.rb CHANGED Viewed

@@ -74,7 +74,20 @@ module Decidim
             "User-Agent" => "Ruby"
           }
         )
-        .to_return(status: 200, body: "", headers: { content_type: rs_format })
+        .to_return(status: 200, body: stubbed_file_body(rs_format), headers: { content_type: rs_format })
+    end
+    # Real content for the stubbed formats. Content validation rejects empty
+    # uploads declared as images, so the stubbed downloads must return bytes
+    # matching their content type.
+    def stubbed_file_body(rs_format)
+      asset = {
+        "image/jpeg" => "city.jpeg",
+        "application/pdf" => "Exampledocument.pdf"
+      }[rs_format]
+      return "" if asset.nil?
+      File.binread(Decidim::Dev.asset(asset))
     end
   end

data/lib/decidim/dev/version.rb CHANGED Viewed

@@ -4,7 +4,7 @@ module Decidim
   # This holds the decidim-dev version.
   module Dev
     def self.version
-      "0.32.0"
+      "0.32.2"
     end
   end
 end

metadata CHANGED Viewed

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: decidim-dev
 version: !ruby/object:Gem::Version
-  version: 0.32.0
+  version: 0.32.2
 platform: ruby
 authors:
 - Josep Jaume Rey Peroy
@@ -31,84 +31,84 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.32.0
+        version: 0.32.2
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.32.0
+        version: 0.32.2
 - !ruby/object:Gem::Dependency
   name: decidim-api
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.32.0
+        version: 0.32.2
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.32.0
+        version: 0.32.2
 - !ruby/object:Gem::Dependency
   name: decidim-comments
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.32.0
+        version: 0.32.2
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.32.0
+        version: 0.32.2
 - !ruby/object:Gem::Dependency
   name: decidim-core
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.32.0
+        version: 0.32.2
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.32.0
+        version: 0.32.2
 - !ruby/object:Gem::Dependency
   name: decidim-generators
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.32.0
+        version: 0.32.2
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.32.0
+        version: 0.32.2
 - !ruby/object:Gem::Dependency
   name: decidim-verifications
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.32.0
+        version: 0.32.2
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.32.0
+        version: 0.32.2
 - !ruby/object:Gem::Dependency
   name: factory_bot_rails
   requirement: !ruby/object:Gem::Requirement
@@ -867,6 +867,7 @@ files:
 - lib/decidim/dev/assets/dummy-dummies-example.xlsx
 - lib/decidim/dev/assets/dummy-export.zip
 - lib/decidim/dev/assets/empty_file.csv
+- lib/decidim/dev/assets/empty_file.png
 - lib/decidim/dev/assets/geocoder_result_here.json
 - lib/decidim/dev/assets/geocoder_result_osm.json
 - lib/decidim/dev/assets/icon.ico
@@ -889,7 +890,47 @@ files:
 - lib/decidim/dev/assets/invalid_extension.log
 - lib/decidim/dev/assets/iso-8859-15.md
 - lib/decidim/dev/assets/logo.png
+- lib/decidim/dev/assets/malformed_svg_unclosed_element.svg
 - lib/decidim/dev/assets/malicious.jpg
+- lib/decidim/dev/assets/malicious_svg_animation.svg
+- lib/decidim/dev/assets/malicious_svg_animation_attribute_names.svg
+- lib/decidim/dev/assets/malicious_svg_animation_fill.svg
+- lib/decidim/dev/assets/malicious_svg_animation_style.svg
+- lib/decidim/dev/assets/malicious_svg_animation_values.svg
+- lib/decidim/dev/assets/malicious_svg_attributename_case.svg
+- lib/decidim/dev/assets/malicious_svg_backslash_reference.svg
+- lib/decidim/dev/assets/malicious_svg_css_backslash_url.svg
+- lib/decidim/dev/assets/malicious_svg_css_comment_in_url.svg
+- lib/decidim/dev/assets/malicious_svg_css_image_set.svg
+- lib/decidim/dev/assets/malicious_svg_css_image_set_nested_parentheses.svg
+- lib/decidim/dev/assets/malicious_svg_cursor.svg
+- lib/decidim/dev/assets/malicious_svg_cursor_attribute.svg
+- lib/decidim/dev/assets/malicious_svg_data_uri_declared_encoding.svg
+- lib/decidim/dev/assets/malicious_svg_data_uri_deep_nested.svg
+- lib/decidim/dev/assets/malicious_svg_data_uri_leading_space.svg
+- lib/decidim/dev/assets/malicious_svg_data_uri_nested.svg
+- lib/decidim/dev/assets/malicious_svg_data_uri_parameter.svg
+- lib/decidim/dev/assets/malicious_svg_entity.svg
+- lib/decidim/dev/assets/malicious_svg_entity_parameter.svg
+- lib/decidim/dev/assets/malicious_svg_external_animation.svg
+- lib/decidim/dev/assets/malicious_svg_external_animation_missing_target.svg
+- lib/decidim/dev/assets/malicious_svg_external_animation_target.svg
+- lib/decidim/dev/assets/malicious_svg_external_feimage.svg
+- lib/decidim/dev/assets/malicious_svg_external_image.svg
+- lib/decidim/dev/assets/malicious_svg_external_use.svg
+- lib/decidim/dev/assets/malicious_svg_fill_external_reference.svg
+- lib/decidim/dev/assets/malicious_svg_foreign_object.svg
+- lib/decidim/dev/assets/malicious_svg_handler.svg
+- lib/decidim/dev/assets/malicious_svg_marker_external_reference.svg
+- lib/decidim/dev/assets/malicious_svg_mask_attribute.svg
+- lib/decidim/dev/assets/malicious_svg_script.svg
+- lib/decidim/dev/assets/malicious_svg_style_comment_string.svg
+- lib/decidim/dev/assets/malicious_svg_style_import.svg
+- lib/decidim/dev/assets/malicious_svg_style_import_string.svg
+- lib/decidim/dev/assets/malicious_svg_style_url_escape.svg
+- lib/decidim/dev/assets/malicious_svg_style_url_string.svg
+- lib/decidim/dev/assets/malicious_svg_stylesheet_pi.svg
+- lib/decidim/dev/assets/malicious_svg_uri.svg
 - lib/decidim/dev/assets/odt_file_reported_as.pdf
 - lib/decidim/dev/assets/participatory_processes.json
 - lib/decidim/dev/assets/participatory_processes_with_null.json
@@ -902,12 +943,35 @@ files:
 - lib/decidim/dev/assets/public_key.jwk
 - lib/decidim/dev/assets/public_key2.jwk
 - lib/decidim/dev/assets/public_key3.jwk
+- lib/decidim/dev/assets/spoofed_image.png
+- lib/decidim/dev/assets/spoofed_image_binary.png
+- lib/decidim/dev/assets/spoofed_image_html.png
+- lib/decidim/dev/assets/spoofed_svg_xml.svg
 - lib/decidim/dev/assets/ssl-cert.pem
 - lib/decidim/dev/assets/ssl-key.pem
+- lib/decidim/dev/assets/test.avif
+- lib/decidim/dev/assets/test.gif
+- lib/decidim/dev/assets/test.heic
+- lib/decidim/dev/assets/test.svg
+- lib/decidim/dev/assets/test_animation.svg
+- lib/decidim/dev/assets/test_animation_link.svg
+- lib/decidim/dev/assets/test_animation_presentation_reference.svg
+- lib/decidim/dev/assets/test_complex.svg
+- lib/decidim/dev/assets/test_css_references.svg
+- lib/decidim/dev/assets/test_data_uri_declared_encoding.svg
+- lib/decidim/dev/assets/test_entity_in_comment.svg
+- lib/decidim/dev/assets/test_entity_in_processing_instruction.svg
 - lib/decidim/dev/assets/test_excel.xlsx
+- lib/decidim/dev/assets/test_percent_encoded_fragment.svg
+- lib/decidim/dev/assets/test_percent_encoded_multibyte_reference.svg
+- lib/decidim/dev/assets/test_percent_encoded_multibyte_reference_mixed.svg
+- lib/decidim/dev/assets/test_presentation_attribute_references.svg
+- lib/decidim/dev/assets/test_references.svg
+- lib/decidim/dev/assets/test_style_text.svg
 - lib/decidim/dev/assets/valid_election_census.csv
 - lib/decidim/dev/assets/valid_emails.csv
 - lib/decidim/dev/assets/verify_user_groups.csv
+- lib/decidim/dev/assets/video.mp4
 - lib/decidim/dev/auth_engine.rb
 - lib/decidim/dev/common_rake.rb
 - lib/decidim/dev/component.rb
@@ -915,7 +979,9 @@ files:
 - lib/decidim/dev/engine.rb
 - lib/decidim/dev/needs_development_tools.rb
 - lib/decidim/dev/railtie.rb
+- lib/decidim/dev/rubocop/cop/decidim/enforce_permission_to.rb
 - lib/decidim/dev/rubocop/cop/decidim/message_antipattern.rb
+- lib/decidim/dev/rubocop/cop/decidim/organization_scoped_finder.rb
 - lib/decidim/dev/test/authorization_shared_examples.rb
 - lib/decidim/dev/test/base_spec_helper.rb
 - lib/decidim/dev/test/factories.rb