jekyll-theme-centos 2.52.0.beta.77 → 2.52.0.beta.79

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 050d40b6de763b0dccb582c8a8e31e26d3386ec6dd63be4e44bf0a954541d8e5
-  data.tar.gz: ba24c6139c384c9e976432097eb25924c762b5e192c3ea147934960c97509d57
+  metadata.gz: 1b990c61640d3b32c7cbd850d7a2cefd242c7dc294441e900cd5ba58c799f265
+  data.tar.gz: 4d4dee0ce7d789549891d898f6e319298a1e43b7d91a333e05837d2b4f347646
 SHA512:
-  metadata.gz: a1e903b5f0db0bf4dcbe84c634be46a200c74dda1ab18bc07d4cdd03f42f1b84968ec5b56a4576cde1e408720dd0e37599181bb9b921d067fda7cb01d66fa52d
-  data.tar.gz: c4e6e228255ae261e636117313f00e4b95f4ccc37a0ed58fad0fa9931c7ab98a592fdb7792617f34f8f49552d3e3fa2e6f281293ecebf18161a640acd3f72dff
+  metadata.gz: '0983a61c93b725fbb45ae64b5b51e2314dc6e984784ca9ed1ec216a85eaa867b9cc7e36a342351978a441f59b3cbb165df970991873d5efcebef390a05c63dbd'
+  data.tar.gz: 1340c3efc761f3991f2440a47bbdba2c023f9a050765dc8093dfea21bce956e7e0d737a9551e1cff8833c5ae73dec0cab6b2e49ed48d9003dc55415053d57412

data/_data/base/project_schema.yml

@@ -23,6 +23,14 @@ properties:
         description: >-
           Custom Bootstrap classes for the main project container, controlling
           alignment, background, and text colors (e.g., `padding`, `bg-image`).
+      content_class:
+        type: string
+        default: flex-column align-items-center py-5
+        description: >-
+          Custom Bootstrap classes for the inner content wrapper (the card
+          rendered inside the project container). Controls flex alignment
+          — e.g., swap `align-items-center` for `align-items-start` or
+          `align-items-end` to control text/content direction.
       screenshot:
         type: string
         default: ""

data/_includes/base/artwork.html.liquid

@@ -20,6 +20,8 @@ Optional Inputs:
 - class: Container div CSS classes
 - image_class: Image element CSS classes
 - data: Artwork data object (overrides fallbacks)
+- column_class: Bootstrap column class for the row wrapper (set by the layout to
+  keep this component aligned with the content column; defaults to "col")
 
 Data Source Hierarchy (priority):
 1. include.data
@@ -50,10 +52,11 @@ Data Source Hierarchy (priority):
 {%- assign artwork_alt         = with_artwork_data.alt         | default: with_artwork_schema.alt.default %}
 {%- assign artwork_class       = with_artwork_data.class       | default: with_artwork_schema.class.default %}
 {%- assign artwork_image_class = with_artwork_data.image_class | default: with_artwork_schema.image_class.default %}
+{%- assign column_class        = include.column_class | default: 'col' %}
 
 {%- comment %} --- HTML --- {% endcomment %}
 <div class="row mb-3">
-  <div class="{{ site.data.base.content.class | default: 'col' }}">
+  <div class="{{ column_class }}">
     <div class="{{ artwork_class }}">
       {%- if artwork_image contains "://" %}
         <img src="{{ artwork_image }}" class="{{ artwork_image_class }}" alt="{{ artwork_alt }}" />

data/_includes/base/breadcrumb.html.liquid

@@ -20,6 +20,8 @@ Required Inputs:
 
 Optional Inputs:
 - with_breadcrumb_data.arialabel: aria-label for the <nav> element (default: "breadcrumb")
+- column_class (include param): Bootstrap column class for the row wrapper (set by
+  the layout to keep this component aligned with the content column; defaults to "col")
 
 Data Source Hierarchy:
 - with_breadcrumb: include.with_breadcrumb → page.with_breadcrumb
@@ -47,8 +49,10 @@ Data Source Hierarchy:
 {%- comment %} Use plugin-provided locale (set for localized pages, defaults to 'en') {%- endcomment %}
 {%- assign detected_locale = page.locale | default: 'en' %}
 
+{%- assign column_class = include.column_class | default: 'col' %}
+
 <div class="row small mb-3">
-  <div class="col">
+  <div class="{{ column_class }}">
     <nav aria-label="{{ with_breadcrumb_data.arialabel | default: with_breadcrumb_schema.arialabel.default | default: 'breadcrumb' }}">
       <ol class="breadcrumb mb-0">
         {%- comment %} Home link - adjust for locale {%- endcomment %}

data/_includes/base/color-table.html.liquid

@@ -18,13 +18,16 @@
 {%- else %}
 {%- assign _item_name = item.name %}
 {%- endif %}
+{%- assign _webaim_fcolor = item.text_color_hex | remove: '#' | upcase %}
+{%- assign _webaim_bcolor = item.hex | remove: '#' | upcase %}
+{%- capture _webaim_link %}https://webaim.org/resources/contrastchecker/?fcolor={{ _webaim_fcolor }}&bcolor={{ _webaim_bcolor }}{%- endcapture %}
     <tr>
       <td class="text-nowrap">{{ _item_name }}</td>
       <td class="text-nowrap"><i class="fas fa-circle fa-xl" style="color: {{ item.hex }}"></i><span role="button" class="copy-btn" data-bs-toggle="tooltip" data-bs-title="Copy hex value" data-copy-value="{{ item.hex }}" aria-label="Copy hex value {{ item.hex }}"><code>{{ item.hex }}</code> <span class="fa-regular fa-copy"></span></span></td>
       <td class="text-nowrap"><span role="button" class="copy-btn" data-bs-toggle="tooltip" data-bs-title="Copy RGB value" data-copy-value="{{ item.rgb }}" aria-label="Copy RGB value {{ item.rgb }}"><code>{{ item.rgb }}</code> <span class="fa-regular fa-copy"></span></span></td>
       <td class="text-nowrap"><span role="button" class="copy-btn" data-bs-toggle="tooltip" data-bs-title="Copy HSV value" data-copy-value="{{ item.hsv }}" aria-label="Copy HSV value {{ item.hsv }}"><code>{{ item.hsv }}</code> <span class="fa-regular fa-copy"></span></span></td>
       <td><span class="badge {{ item.text_badge }}">{{ item.text_color }}</span></td>
-      <td class="text-nowrap"><code>{{ item.contrast_ratio | remove: '`' }}</code> <a href="https://webaim.org/resources/contrastchecker/?fcolor={{ item.text_color_hex | remove: '#' | upcase }}&bcolor={{ item.hex | remove: '#' | upcase }}" target="_blank" class="text-decoration-none" data-bs-toggle="tooltip" title="Verify with WebAIM" aria-label="Verify contrast ratio with WebAIM"><i class="fas fa-external-link-alt"></i></a></td>
+      <td class="text-nowrap"><code>{{ item.contrast_ratio | remove: '`' }}</code> {% include base/link.html.liquid link=_webaim_link target="_blank" class="text-decoration-none" icon="fas fa-external-link-alt" data_bs_toggle="tooltip" data_bs_title="Verify with WebAIM" aria_label="Verify contrast ratio with WebAIM" %}</td>
       <td class="text-nowrap">{% if item.wcag_2_2_aa %}<span class="d-inline-block" data-bs-toggle="tooltip" title="Exceeds WCAG 2.2 AA standard (4.5:1 minimum)"><i class="fas fa-circle-check text-success"></i></span>{% else %}<span class="d-inline-block" data-bs-toggle="tooltip" title="Underperforms WCAG 2.2 AA standard (4.5:1 minimum)"><i class="fas fa-circle-xmark text-danger"></i></span>{% endif %} <code>{{ item.wcag_2_2_aa_margin | remove: '`' }}</code></td>
       <td class="text-nowrap">{% if item.wcag_2_2_aaa %}<span class="d-inline-block" data-bs-toggle="tooltip" title="Exceeds WCAG 2.2 AAA standard (7.0:1 minimum)"><i class="fas fa-circle-check text-success"></i></span>{% else %}<span class="d-inline-block" data-bs-toggle="tooltip" title="Underperforms WCAG 2.2 AAA standard (7.0:1 minimum)"><i class="fas fa-circle-xmark text-danger"></i></span>{% endif %} <code>{{ item.wcag_2_2_aaa_margin | remove: '`' }}</code></td>
     </tr>

data/_includes/base/content.html.liquid

@@ -14,7 +14,8 @@
   | default: site.data[content_schema_key]
   | default: site.data.base[content_schema_key]
   -%}
-  {%- assign class = with_content_data.class
+  {%- assign class = include.column_class
+  | default: with_content_data.class
   | default: content_schema.properties.with_content_data.properties.class.default
   | default: 'col' -%}
   <div class="row mb-3">

data/_includes/base/copyvalue.html.liquid

@@ -2,18 +2,29 @@
 ================================================================================
 Template: Copy Value Component
 Purpose: Copy to clipboard with visual feedback (checkmark + tooltip).
-Auto-detects and handles both escaped and unescaped values.
+Decodes HTML-entity-escaped values back to plain text before copying.
 ================================================================================
 
-Recommended Usage (in template):
+Required Usage (in template):
   <span role="button" class="copy-btn" data-copy-value="{{ command | escape }}"
         data-bs-toggle="tooltip" data-bs-title="Copy command">
     <span class="fa-regular fa-copy"></span>
   </span>
 
+SECURITY — `data-copy-value` MUST always go through Liquid's `| escape` (or
+equivalent HTML-attribute encoding) at the point where it is written, with no
+exception for values that "look safe". The JS below decodes HTML entities
+(&quot;, &amp;, &#39;, …) back to plain text before copying so the clipboard
+receives the original string rather than its escaped form — this decoding is
+a UX convenience, not sanitization, and provides no protection if the value
+was interpolated unescaped in the first place. An unescaped, attacker-
+influenced value (a query parameter, CMS field, etc.) placed directly in
+data-copy-value breaks out of the HTML attribute at render time, before this
+script ever runs.
+
 Strategic Design Logic:
-- Armored implementation: handles escaped and unescaped values
-- HTML entity detection: decodes &quot;, &amp;, &#39; automatically
+- HTML entity decoding: reverses &quot;, &amp;, &#39; encoding so the
+  clipboard receives plain text, independent of how the value was escaped
 - Visual feedback: checkmark icon + success tooltip
 - Auto-reset: returns to original state after delay
 - Clipboard API: native browser copy functionality

data/_includes/base/project.html.liquid

@@ -46,6 +46,7 @@ Data Source Hierarchy (priority):
 {%- if with_project -%}
 
 {% assign project_class               = with_project_data.class               | default: with_project_schema.class.default %}
+{% assign project_content_class       = with_project_data.content_class       | default: with_project_schema.content_class.default %}
 {% assign project_screenshot          = with_project_data.screenshot          | default: with_project_schema.screenshot.default %}
 {% assign project_screenshot_class    = with_project_data.screenshot_class    | default: with_project_schema.screenshot_class.default %}
 {% assign project_screenshot_alt      = with_project_data.screenshot_alt      | default: with_project_schema.screenshot_alt.default %}
@@ -69,7 +70,7 @@ Data Source Hierarchy (priority):
 <div class="d-flex{% if project_class != "" %} {{ project_class }}{% endif %}">
   <div class="container{% if with_navbar %} pt-5{% endif %}">
     {% include base/card.html.liquid
-          class             = "flex-column align-items-center py-5"
+          class             = project_content_class
           color             = "primary"
           screenshot        = project_screenshot
           screenshot_class  = project_screenshot_class

data/_includes/base/title.html.liquid

@@ -22,6 +22,8 @@ Optional Inputs (from data objects):
 
 Optional Inputs (from include):
 - data: Title configuration object
+- column_class: Bootstrap column class for the row wrapper (set by the layout to
+  keep this component aligned with the content column; defaults to "col")
 
 Data Source Hierarchy (in priority order):
 1. include.data       - Explicitly passed configuration
@@ -54,9 +56,10 @@ Conditional Logic:
 {%- assign title_class      = with_title_data.title_class      | default: with_title_schema.title_class.default %}
 {%- assign title_lead       = with_title_data.title_lead       | default: page.title_lead %}
 {%- assign title_lead_class = with_title_data.title_lead_class | default: with_title_schema.title_lead_class.default %}
+{%- assign column_class     = include.column_class | default: 'col' %}
 
 <div class="row mb-3">
-  <div class="{{ site.data.base.content.class | default: 'col' }}">
+  <div class="{{ column_class }}">
     <div class="{{ class }}">
       <p class="{{ title_class }}">{{ title }}</p>
       {% if title_lead != "" %}

data/_includes/base/toc.html.liquid

@@ -31,6 +31,8 @@ Optional Inputs (from data objects):
 
 Optional Inputs (from include):
 - data: TOC configuration object
+- column_class: Bootstrap column class for the row wrapper (set by the layout to
+  keep this component aligned with the content column; defaults to "col")
 
 Data Source Hierarchy (in priority order):
 - with_toc:      include.with_toc → page.with_toc
@@ -59,12 +61,13 @@ Data Source Hierarchy (in priority order):
 {%- assign sanitize          = with_toc_data.sanitize          | default: with_toc_schema["sanitize"].default %}
 {%- assign skip_no_ids       = with_toc_data.skip_no_ids       | default: with_toc_schema["skip_no_ids"].default %}
 {%- assign flat_toc          = with_toc_data.flat_toc          | default: with_toc_schema["flat_toc"].default %}
+{%- assign column_class      = include.column_class | default: 'col' %}
 
 {%- comment %} === Presentation === {% endcomment %}
 
 {%- comment %} --- HTML ---  {% endcomment %}
 <div class="row mb-3">
-  <div class="{{ site.data.base.content.class | default: 'col' }}">
+  <div class="{{ column_class }}">
     <div class="accordion shadow-sm" id="pageToc">
       <div class="accordion-item">
         <div class="accordion-header" id="flush-headingOne">

data/_layouts/base/default.html

@@ -9,6 +9,15 @@
 
     {% include base/breakingnews.html.liquid -%}
 
+    {%- assign with_content_data = page.with_content_data
+    | default: site.data.content
+    | default: site.data.base.content
+    -%}
+    {%- assign content_schema = site.data.content_schema | default: site.data.base.content_schema -%}
+    {%- assign content_class = with_content_data.class
+    | default: content_schema.properties.with_content_data.properties.class.default
+    | default: 'col' -%}
+
     <main class="container py-3">
 
       {%- include base/announcement.html.liquid %}
@@ -17,15 +26,15 @@
 
       {% include base/event.html.liquid %}
 
-      {% include base/breadcrumb.html.liquid %}
+      {% include base/breadcrumb.html.liquid column_class=content_class %}
 
-      {% include base/title.html.liquid %}
+      {% include base/title.html.liquid column_class=content_class %}
 
-      {% include base/artwork.html.liquid %}
+      {% include base/artwork.html.liquid column_class=content_class %}
 
-      {% include base/toc.html.liquid %}
+      {% include base/toc.html.liquid column_class=content_class %}
 
-      {% include base/content.html.liquid %}
+      {% include base/content.html.liquid column_class=content_class %}
 
     </main>
 

data/assets/js/base/backtotop.js

@@ -2,7 +2,11 @@
 // Reads configuration from data attributes on this script tag
 // Applied via backtotop.html.liquid template with data attributes
 
-(function () {
+// This script tag lives in <head>, before <body> exists. defer normally
+// delays execution until after parsing, but consumers that inline this
+// file (e.g. monolith bundling) drop the src that defer depends on, so the
+// wait for DOMContentLoaded is done explicitly instead of relying on it.
+document.addEventListener('DOMContentLoaded', () => {
   const scriptTag = document.getElementById('centos-backtop')
 
   if (!scriptTag) {
@@ -17,4 +21,4 @@
   }
 
   addBackToTop(config)
-})()
+})

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: jekyll-theme-centos
 version: !ruby/object:Gem::Version
-  version: 2.52.0.beta.77
+  version: 2.52.0.beta.79
 platform: ruby
 authors:
 - Alain Reguera Delgado