openproject-primer_view_components 0.89.1 → 0.90.1

data/app/lib/primer/safe_href_helper.rb

@@ -0,0 +1,36 @@
+# frozen_string_literal: true
+
+# Primer::SafeHrefHelper
+#
+# Detects unsafe URI schemes (e.g. `javascript:`) in `href` values so they can
+# be neutralized before being rendered into HTML attributes. Without this check,
+# a caller that forwards untrusted input into a component's `href:` argument can
+# trigger XSS when the user clicks the rendered anchor.
+module Primer
+  # :nodoc:
+  module SafeHrefHelper
+    # URI schemes that can execute script in the browser and are never valid
+    # destinations for a Primer-rendered link.
+    DISALLOWED_HREF_SCHEMES = %w[javascript vbscript].freeze
+
+    # Returns true when `href` starts with a disallowed URI scheme.
+    #
+    # Mirrors browser URL parsing by stripping ASCII whitespace and control
+    # characters (including tab/CR/LF) before extracting the scheme. This
+    # prevents bypasses such as `j\tavascript:...`, ` JaVaScRiPt:...`, or a
+    # leading null byte, all of which browsers happily execute.
+    def self.unsafe_href?(href)
+      return false if href.nil?
+
+      normalized = href.to_s.gsub(/[\u0000-\u0020]/, "")
+      scheme = normalized[/\A([a-z][a-z0-9+\-.]*):/i, 1]
+      return false unless scheme
+
+      DISALLOWED_HREF_SCHEMES.include?(scheme.downcase)
+    end
+
+    def unsafe_href?(href)
+      SafeHrefHelper.unsafe_href?(href)
+    end
+  end
+end

data/lib/primer/form_components.rb

@@ -16,7 +16,7 @@ module Primer
           @system_arguments = system_arguments
         end
 
-        def render_in(view_context, &block)
+        def render_in(view_context, **_kwargs, &block)
           builder = Primer::Forms::Builder.new(
             nil, nil, view_context, {}
           )

data/lib/primer/static/generate_previews.rb

@@ -10,7 +10,7 @@ module Primer
     module GeneratePreviews
       class << self
         def call
-          Lookbook.previews.filter_map do |preview|
+          Lookbook.previews.sort_by(&:lookup_path).filter_map do |preview|
             next if preview.preview_class == Primer::FormsPreview
             next if Primer::Accessibility.ignore_preview?(preview.preview_class)
 

data/lib/primer/view_components/version.rb

@@ -5,7 +5,7 @@ module Primer
   module ViewComponents
     module VERSION
       MAJOR = 0
-      MINOR = 89
+      MINOR = 90
       PATCH = 1
 
       STRING = [MAJOR, MINOR, PATCH].join(".")

data/previews/primer/beta/border_box_preview.rb

@@ -6,11 +6,11 @@ module Primer
     class BorderBoxPreview < ViewComponent::Preview
       # @label Playground
       #
+      # @param list_id text
       # @param padding [Symbol] select [default, condensed, spacious]
       # @param scheme [Symbol] select [default, neutral, info, warning]
-      # @param list_id [String] text
-      def playground(padding: :default, scheme: :default, list_id: nil)
-        render(Primer::Beta::BorderBox.new(padding: padding, list_id: list_id)) do |component|
+      def playground(padding: :default, scheme: :default, list_id: "my-list")
+        render(Primer::Beta::BorderBox.new(padding: padding, list_arguments: { id: list_id })) do |component|
           component.with_header { "Header" }
           component.with_body { "Body" }
           component.with_row(scheme: scheme) { "#{scheme.to_s.capitalize} row one" }

data/previews/primer/open_project/collapsible_section_preview/with_link_in_title.html.erb

@@ -0,0 +1,6 @@
+<%= render(Primer::OpenProject::CollapsibleSection.new) do |section| %>
+  <% section.with_title { render(Primer::Beta::Link.new(href: "#")) { "Feedback" } } %>
+  <% section.with_collapsible_content do %>
+    <%= render(Primer::Alpha::Banner.new(mb: 3)) { "Please take one minute to answer this question" } %>
+  <% end %>
+<% end %>

data/previews/primer/open_project/collapsible_section_preview.rb

@@ -52,6 +52,15 @@ module Primer
           locals: { }
         )
       end
+
+      # @label With link in title
+      # @hidden
+      def with_link_in_title
+        render_with_template(
+          template: "primer/open_project/collapsible_section_preview/with_link_in_title",
+          locals: { }
+        )
+      end
     end
   end
 end

data/previews/primer/open_project/filterable_tree_view_preview/async_custom_loading_indicator.html.erb

@@ -0,0 +1,9 @@
+<%= render(Primer::OpenProject::FilterableTreeView.new(
+  src: primer_view_components.filterable_tree_view_items_tree_path(select_variant: :single)
+)) do |tree_view| %>
+  <% tree_view.with_loading_indicator do %>
+    <%= render(Primer::Alpha::Stack.new(align: :center, p: 3)) do %>
+      <%= render(Primer::Beta::Spinner.new) %>
+    <% end %>
+  <% end %>
+<% end %>

data/previews/primer/open_project/filterable_tree_view_preview.rb

@@ -123,6 +123,13 @@ module Primer
         })
       end
 
+      # @label Async (with custom loading indicator)
+      #
+      # Demonstrates replacing the default skeleton loader with arbitrary content.
+      def async_custom_loading_indicator
+        render_with_template
+      end
+
       # @label Async (with server-side highlighting)
       #
       # Demonstrates `show_search_highlighting: false`: the client skips its own highlight logic

data/static/arguments.json

@@ -4250,6 +4250,18 @@
         "default": "`:default`",
         "description": "One of `:condensed`, `:default`, or `:spacious`."
       },
+      {
+        "name": "list_arguments",
+        "type": "Hash",
+        "default": "`{}`",
+        "description": "[System arguments](/system-arguments)"
+      },
+      {
+        "name": "list_id",
+        "type": "String",
+        "default": "N/A",
+        "description": "Deprecated. Use <code>list_arguments: { id: ... }</code> instead."
+      },
       {
         "name": "system_arguments",
         "type": "Hash",

data/static/classes.json

@@ -560,6 +560,9 @@
   "Popover-message": [
     "Primer::Beta::Popover"
   ],
+  "Popover-message--bottom": [
+    "Primer::Beta::Popover"
+  ],
   "Popover-message--bottom-left": [
     "Primer::Beta::Popover"
   ],
@@ -569,9 +572,27 @@
   "Popover-message--large": [
     "Primer::Beta::Popover"
   ],
+  "Popover-message--left": [
+    "Primer::Beta::Popover"
+  ],
+  "Popover-message--left-bottom": [
+    "Primer::Beta::Popover"
+  ],
+  "Popover-message--left-top": [
+    "Primer::Beta::Popover"
+  ],
   "Popover-message--no-caret": [
     "Primer::Beta::Popover"
   ],
+  "Popover-message--right": [
+    "Primer::Beta::Popover"
+  ],
+  "Popover-message--right-bottom": [
+    "Primer::Beta::Popover"
+  ],
+  "Popover-message--right-top": [
+    "Primer::Beta::Popover"
+  ],
   "Popover-message--top-left": [
     "Primer::Beta::Popover"
   ],

data/static/classnames.cjs

@@ -0,0 +1,507 @@
+module.exports = new Set([
+  'ActionBar',
+  'ActionBar--large',
+  'ActionBar--small',
+  'ActionBar-divider',
+  'ActionBar-item',
+  'ActionBar-item-container',
+  'ActionBar-more-menu',
+  'ActionList--subGroup',
+  'ActionList-sectionDivider',
+  'ActionList-sectionDivider--filled',
+  'ActionList-sectionDivider-title',
+  'ActionListContent',
+  'ActionListContent--blockDescription',
+  'ActionListContent--hasActiveSubItem',
+  'ActionListContent--sizeLarge',
+  'ActionListContent--sizeXLarge',
+  'ActionListHeader',
+  'ActionListItem',
+  'ActionListItem--danger',
+  'ActionListItem--hasSubItem',
+  'ActionListItem--navActive',
+  'ActionListItem--subItem',
+  'ActionListItem--trailingActionHover',
+  'ActionListItem--withActions',
+  'ActionListItem-action',
+  'ActionListItem-action--leading',
+  'ActionListItem-action--trailing',
+  'ActionListItem-collapseIcon',
+  'ActionListItem-description',
+  'ActionListItem-descriptionWrap',
+  'ActionListItem-descriptionWrap--inline',
+  'ActionListItem-label',
+  'ActionListItem-label--truncate',
+  'ActionListItem-singleSelectCheckmark',
+  'ActionListItem-trailingAction',
+  'ActionListItem-visual',
+  'ActionListItem-visual--leading',
+  'ActionListItem-visual--trailing',
+  'ActionListWrap',
+  'ActionListWrap--divided',
+  'ActionListWrap--inset',
+  'AvatarStack',
+  'AvatarStack--right',
+  'AvatarStack--three-plus',
+  'AvatarStack--two',
+  'AvatarStack-body',
+  'Banner',
+  'Banner--error',
+  'Banner--full',
+  'Banner--full-whenNarrow',
+  'Banner--success',
+  'Banner--upsell',
+  'Banner--warning',
+  'Banner-actions',
+  'Banner-close',
+  'Banner-message',
+  'Banner-title',
+  'Banner-visual',
+  'BorderGrid',
+  'BorderGrid--spacious',
+  'BorderGrid-cell',
+  'BorderGrid-row',
+  'Box',
+  'Box--blue',
+  'Box--condensed',
+  'Box--danger',
+  'Box--scrollable',
+  'Box--spacious',
+  'Box-body',
+  'Box-btn-octicon',
+  'Box-footer',
+  'Box-header',
+  'Box-header--blue',
+  'Box-row',
+  'Box-row--blue',
+  'Box-row--drag-button',
+  'Box-row--drag-hide',
+  'Box-row--focus-blue',
+  'Box-row--focus-gray',
+  'Box-row--gray',
+  'Box-row--hover-blue',
+  'Box-row--hover-gray',
+  'Box-row--unread',
+  'Box-row--yellow',
+  'Box-row-link',
+  'Box-title',
+  'Button',
+  'Button--danger',
+  'Button--fullWidth',
+  'Button--iconOnly',
+  'Button--inactive',
+  'Button--invisible',
+  'Button--invisible-noVisuals',
+  'Button--labelWrap',
+  'Button--large',
+  'Button--link',
+  'Button--primary',
+  'Button--secondary',
+  'Button--small',
+  'Button-content',
+  'Button-content--alignStart',
+  'Button-label',
+  'Button-leadingVisual',
+  'Button-trailingAction',
+  'Button-trailingVisual',
+  'Button-visual',
+  'ButtonGroup',
+  'CollapsibleHeader',
+  'CollapsibleHeader--multi-line',
+  'CollapsibleHeader-description',
+  'CollapsibleHeader-title-line',
+  'CollapsibleHeader-triggerArea',
+  'CollapsibleSection--triggerArea',
+  'Counter',
+  'Counter--primary',
+  'Counter--secondary',
+  'DragHandle',
+  'FilterableTreeViewLayout',
+  'FilterableTreeViewLoadingSkeleton',
+  'FilterableTreeViewTreeContainer',
+  'FormControl',
+  'FormControl--fullWidth',
+  'FormControl-caption',
+  'FormControl-check-group-wrap',
+  'FormControl-checkbox',
+  'FormControl-checkbox-labelWrap',
+  'FormControl-checkbox-wrap',
+  'FormControl-error',
+  'FormControl-horizontalGroup',
+  'FormControl-inlineValidation',
+  'FormControl-inlineValidation--success',
+  'FormControl-inlineValidation--visual',
+  'FormControl-input',
+  'FormControl-input-leadingVisual',
+  'FormControl-input-leadingVisualWrap',
+  'FormControl-input-trailingAction',
+  'FormControl-input-trailingAction--divider',
+  'FormControl-input-trailingVisualLabel',
+  'FormControl-input-trailingVisualWrap',
+  'FormControl-input-width--auto',
+  'FormControl-input-width--large',
+  'FormControl-input-width--medium',
+  'FormControl-input-width--small',
+  'FormControl-input-width--xlarge',
+  'FormControl-input-width--xsmall',
+  'FormControl-input-width--xxlarge',
+  'FormControl-input-wrap',
+  'FormControl-input-wrap--large',
+  'FormControl-input-wrap--leadingVisual',
+  'FormControl-input-wrap--small',
+  'FormControl-input-wrap--trailingAction',
+  'FormControl-input-wrap--trailingLabel',
+  'FormControl-input-wrap--trailingText',
+  'FormControl-input-wrap--trailingVisual',
+  'FormControl-input-wrap-trailingAction--divider',
+  'FormControl-inset',
+  'FormControl-label',
+  'FormControl-large',
+  'FormControl-medium',
+  'FormControl-monospace',
+  'FormControl-radio',
+  'FormControl-radio-group-wrap',
+  'FormControl-radio-labelWrap',
+  'FormControl-radio-wrap',
+  'FormControl-select',
+  'FormControl-select-wrap',
+  'FormControl-small',
+  'FormControl-spacingWrapper',
+  'FormControl-success',
+  'FormControl-textarea',
+  'FormControl-toggleSwitchInput',
+  'FormControl-warning',
+  'InlineMessage',
+  'InlineMessageIcon',
+  'InputGroup',
+  'InputGroup-input-width--auto',
+  'InputGroup-input-width--large',
+  'InputGroup-input-width--medium',
+  'InputGroup-input-width--small',
+  'InputGroup-input-width--xlarge',
+  'InputGroup-input-width--xsmall',
+  'InputGroup-input-width--xxlarge',
+  'Label',
+  'Label--accent',
+  'Label--attention',
+  'Label--closed',
+  'Label--danger',
+  'Label--done',
+  'Label--info',
+  'Label--inline',
+  'Label--large',
+  'Label--open',
+  'Label--primary',
+  'Label--secondary',
+  'Label--severe',
+  'Label--sponsors',
+  'Label--success',
+  'Label--warning',
+  'Layout',
+  'Layout--divided',
+  'Layout--flowRow-until-lg',
+  'Layout--flowRow-until-md',
+  'Layout--gutter-condensed',
+  'Layout--gutter-none',
+  'Layout--gutter-spacious',
+  'Layout--sidebar-narrow',
+  'Layout--sidebar-wide',
+  'Layout--sidebarPosition-end',
+  'Layout--sidebarPosition-flowRow-end',
+  'Layout--sidebarPosition-flowRow-none',
+  'Layout--sidebarPosition-flowRow-start',
+  'Layout--sidebarPosition-start',
+  'Layout-divider',
+  'Layout-divider--flowRow-hidden',
+  'Layout-divider--flowRow-shallow',
+  'Layout-main',
+  'Layout-main-centered-lg',
+  'Layout-main-centered-md',
+  'Layout-main-centered-xl',
+  'Layout-sidebar',
+  'Link',
+  'Link--muted',
+  'Link--onHover',
+  'Link--primary',
+  'Link--secondary',
+  'Link--underline',
+  'Link-content',
+  'Overlay',
+  'Overlay--full',
+  'Overlay--full-whenNarrow',
+  'Overlay--fullscreen-whenNarrow',
+  'Overlay--height-auto',
+  'Overlay--height-large',
+  'Overlay--height-medium',
+  'Overlay--height-small',
+  'Overlay--height-xlarge',
+  'Overlay--height-xsmall',
+  'Overlay--hidden',
+  'Overlay--motion-scaleFade',
+  'Overlay--placement-bottom-whenNarrow',
+  'Overlay--placement-left',
+  'Overlay--placement-left-whenNarrow',
+  'Overlay--placement-right',
+  'Overlay--placement-right-whenNarrow',
+  'Overlay--size-auto',
+  'Overlay--size-full',
+  'Overlay--size-large',
+  'Overlay--size-medium',
+  'Overlay--size-medium-portrait',
+  'Overlay--size-small',
+  'Overlay--size-small-portrait',
+  'Overlay--size-xlarge',
+  'Overlay--size-xsmall',
+  'Overlay--visibilityHidden',
+  'Overlay--width-auto',
+  'Overlay--width-large',
+  'Overlay--width-medium',
+  'Overlay--width-small',
+  'Overlay--width-xlarge',
+  'Overlay--width-xxlarge',
+  'Overlay-actionWrap',
+  'Overlay-body',
+  'Overlay-body--paddingCondensed',
+  'Overlay-body--paddingNone',
+  'Overlay-closeButton',
+  'Overlay-description',
+  'Overlay-footer',
+  'Overlay-footer--alignCenter',
+  'Overlay-footer--alignEnd',
+  'Overlay-footer--alignStart',
+  'Overlay-footer--divided',
+  'Overlay-form',
+  'Overlay-header',
+  'Overlay-header--divided',
+  'Overlay-headerContentWrap',
+  'Overlay-headerFilter',
+  'Overlay-title',
+  'Overlay-titleWrap',
+  'Page',
+  'PageHeader',
+  'PageHeader--noBreadcrumb',
+  'PageHeader--withTabNav',
+  'PageHeader-actions',
+  'PageHeader-breadcrumbs',
+  'PageHeader-contextBar',
+  'PageHeader-description',
+  'PageHeader-description--underlined-links',
+  'PageHeader-leadingAction',
+  'PageHeader-parentLink',
+  'PageHeader-tabNav',
+  'PageHeader-tabNavBar',
+  'PageHeader-title',
+  'PageHeader-title--large',
+  'PageHeader-titleBar',
+  'PaginationContainer',
+  'Popover',
+  'Popover-message',
+  'Popover-message--bottom',
+  'Popover-message--bottom-left',
+  'Popover-message--bottom-right',
+  'Popover-message--large',
+  'Popover-message--left',
+  'Popover-message--left-bottom',
+  'Popover-message--left-top',
+  'Popover-message--no-caret',
+  'Popover-message--right',
+  'Popover-message--right-bottom',
+  'Popover-message--right-top',
+  'Popover-message--top-left',
+  'Popover-message--top-right',
+  'Progress',
+  'Progress--large',
+  'Progress--small',
+  'Progress-item',
+  'SegmentedControl',
+  'SegmentedControl--fullWidth',
+  'SegmentedControl--iconOnly',
+  'SegmentedControl--medium',
+  'SegmentedControl--small',
+  'SegmentedControl-item',
+  'SegmentedControl-item--selected',
+  'SelectPanel-emptyPanel',
+  'SelectPanel-loadingPanel',
+  'SidePanel-sectionAction',
+  'SidePanel-sectionContent',
+  'SidePanel-sectionCounter',
+  'SidePanel-sectionDescription',
+  'SidePanel-sectionHeader',
+  'SkeletonBox',
+  'Stack',
+  'StackItem',
+  'State',
+  'State--closed',
+  'State--draft',
+  'State--merged',
+  'State--open',
+  'State--small',
+  'SubHeader',
+  'SubHeader--emptyLeftPane',
+  'SubHeader--expandedSearch',
+  'SubHeader-bottomPane',
+  'SubHeader-filterContainer',
+  'SubHeader-filterInput_hiddenClearButton',
+  'SubHeader-hiddenOnExpand',
+  'SubHeader-leftPane',
+  'SubHeader-middlePane',
+  'SubHeader-rightPane',
+  'Subhead',
+  'Subhead--spacious',
+  'Subhead-actions',
+  'Subhead-description',
+  'Subhead-heading',
+  'Subhead-heading--danger',
+  'Subhead-heading--large',
+  'Subhead-heading--medium',
+  'TimelineItem',
+  'TimelineItem--condensed',
+  'TimelineItem-avatar',
+  'TimelineItem-badge',
+  'TimelineItem-badge--success',
+  'TimelineItem-body',
+  'TimelineItem-break',
+  'ToggleSwitch',
+  'ToggleSwitch--checked',
+  'ToggleSwitch--disabled',
+  'ToggleSwitch--small',
+  'ToggleSwitch--statusAtEnd',
+  'ToggleSwitch-circleIcon',
+  'ToggleSwitch-icons',
+  'ToggleSwitch-knob',
+  'ToggleSwitch-lineIcon',
+  'ToggleSwitch-status',
+  'ToggleSwitch-statusIcon',
+  'ToggleSwitch-statusOff',
+  'ToggleSwitch-statusOn',
+  'ToggleSwitch-track',
+  'TreeItemSkeletonTextStyles',
+  'TreeViewFailureMessage',
+  'TreeViewItem',
+  'TreeViewItem-singleSelectCheckmark',
+  'TreeViewItemCheckbox',
+  'TreeViewItemContainer',
+  'TreeViewItemContent',
+  'TreeViewItemContentText',
+  'TreeViewItemLeadingAction',
+  'TreeViewItemLevelLine',
+  'TreeViewItemToggle',
+  'TreeViewItemToggleEnd',
+  'TreeViewItemToggleHover',
+  'TreeViewItemTrailingAction',
+  'TreeViewItemVisual',
+  'TreeViewRootUlStyles',
+  'TreeViewSkeletonItemContainerStyle',
+  'TreeViewVisuallyHidden',
+  'Truncate',
+  'Truncate-text',
+  'Truncate-text--expandable',
+  'Truncate-text--primary',
+  'UnderlineNav',
+  'UnderlineNav--full',
+  'UnderlineNav--right',
+  'UnderlineNav-actions',
+  'UnderlineNav-body',
+  'UnderlineNav-container',
+  'UnderlineNav-item',
+  'UnderlineNav-octicon',
+  'alert',
+  'autocomplete-body',
+  'autocomplete-embedded-icon-wrap',
+  'autocomplete-item',
+  'autocomplete-label-inline',
+  'autocomplete-label-stacked',
+  'autocomplete-results',
+  'avatar',
+  'avatar-1',
+  'avatar-2',
+  'avatar-3',
+  'avatar-4',
+  'avatar-5',
+  'avatar-6',
+  'avatar-7',
+  'avatar-8',
+  'avatar-group-item',
+  'avatar-link',
+  'avatar-more',
+  'avatar-small',
+  'blankslate',
+  'blankslate-action',
+  'blankslate-capped',
+  'blankslate-clean-background',
+  'blankslate-container',
+  'blankslate-description',
+  'blankslate-heading',
+  'blankslate-icon',
+  'blankslate-image',
+  'blankslate-large',
+  'blankslate-narrow',
+  'blankslate-spacious',
+  'breadcrumb-item',
+  'breadcrumb-item-selected',
+  'btn',
+  'btn-large-mktg',
+  'btn-link',
+  'btn-mktg',
+  'btn-muted-mktg',
+  'btn-octicon',
+  'btn-primary',
+  'btn-signup-mktg',
+  'btn-small-mktg',
+  'btn-subtle-mktg',
+  'close-button',
+  'css-truncate',
+  'css-truncate-overflow',
+  'css-truncate-target',
+  'disabled',
+  'dropdown',
+  'dropdown-caret',
+  'dropdown-divider',
+  'dropdown-header',
+  'dropdown-item',
+  'dropdown-menu',
+  'dropdown-menu-e',
+  'dropdown-menu-ne',
+  'dropdown-menu-no-overflow',
+  'dropdown-menu-s',
+  'dropdown-menu-se',
+  'dropdown-menu-sw',
+  'dropdown-menu-w',
+  'dropdown-signout',
+  'expandable',
+  'flash',
+  'flash-action',
+  'flash-banner',
+  'flash-close',
+  'flash-error',
+  'flash-full',
+  'flash-messages',
+  'flash-success',
+  'flash-warn',
+  'form-control',
+  'has-modal',
+  'has-modal-disable-scroll',
+  'is-dragging',
+  'label',
+  'labels',
+  'menu',
+  'menu-heading',
+  'menu-item',
+  'menu-warning',
+  'navigation-focus',
+  'not-anchored',
+  'octicon',
+  'octicon-check',
+  'selected',
+  'sortable-chosen',
+  'sortable-ghost',
+  'state',
+  'tabnav',
+  'tabnav-btn',
+  'tabnav-extra',
+  'tabnav-tab',
+  'tabnav-tabs',
+  'unread',
+  'warning',
+  'zeroclipboard-is-hover',
+])