Merge branch 'roadmap-main' into main

README.md

@@ -56,9 +56,13 @@ The following is a list of customizations that we have made to the base DMPRoadm
 - **Text/Labels:** Various text and labels have been updated.
 
 ## Troubleshooting
-
 See the [Troubleshooting Guide](https://github.com/DMPRoadmap/roadmap/wiki/Troubleshooting) on the DMPRoadmap Wiki
 
+#### Support
+Issues should be reported here on [Github Issues](https://github.com/DMPRoadmap/roadmap/issues)
+Please be advised though that we can only provide limited support for your local installations.
+Any security patches and bugfixes will be applied to the most recent version, and we will endeavour to support migrations to the current release.
+
 ## Contributing
 
 See the [Contributing Guide](https://github.com/DMPRoadmap/roadmap/wiki/Get-involved)

app/controllers/orgs_controller.rb

@@ -100,15 +100,18 @@ def admin_update
   end
   # rubocop:enable Metrics/AbcSize, Metrics/MethodLength
 
-  # # --------------------------------------------------------
-  # # Start DMPTool customization
-  # #   Commenting out so that our customization is used
-  # # --------------------------------------------------------
+  # --------------------------------------------------------
+  # Start DMPTool customization
+  #   Commenting out so that our customization is used
+  # --------------------------------------------------------
   # # This action is used by installations that have the following config enabled:
   # #   Rails.configuration.x.shibboleth.use_filtered_discovery_service
   # def shibboleth_ds
-  #   redirect_to root_path unless current_user.nil?
-  # 
+  #   unless current_user.nil?
+  #     redirect_to root_path
+  #     return
+  #   end
+  #
   #   @user = User.new
   #   # Display the custom Shibboleth discovery service page.
   #   @orgs = Identifier.by_scheme_name("shibboleth", "Org")
@@ -117,12 +120,13 @@ def admin_update
   #
   #   # Disabling the rubocop check here because it would not be clear what happens
   #   # if the ``@orgs` array has items ... it renders the shibboleth_ds view
-  #   # rubocop:disable Style/GuardClause
+  #   # rubocop:disable Style/GuardClause, Style/RedundantReturn
   #   if @orgs.empty?
   #     flash.now[:alert] = _("No organisations are currently registered.")
   #     redirect_to user_shibboleth_omniauth_authorize_path
+  #     return
   #   end
-  #   # rubocop:enable Style/GuardClause
+  #   # rubocop:enable Style/GuardClause, Style/RedundantReturn
   # end
   #
   # # This action is used to redirect a user to the Shibboleth IdP

app/controllers/super_admin/themes_controller.rb

@@ -51,7 +51,7 @@ def destroy
         redirect_to super_admin_themes_path, notice: msg
       else
         flash.now[:alert] = failure_message(@theme, _("delete"))
-        redner :edit
+        render :edit
       end
     end
 

app/javascript/src/utils/tinymce.js.erb

@@ -46,12 +46,7 @@ export const defaultOptions = {
   // editorManager.baseURL is not resolved properly for IE since document.currentScript
   // is not supported, see issue https://github.com/tinymce/tinymce/issues/358
   skin_url: '/tinymce/skins/lightgray',
-  // --------------------------
-  // DMPTool customization
-  // Switched to just use the following css
-  // --------------------------
   content_css: ['/tinymce/tinymce.css'],
-  // content_css: ['<%= helpers.asset_path "/assets/blocks/_tinymce_content.css"  %>'],
 };
 /*
   This function is invoked anytime a new editor is initialised (e.g. Tinymce.init())

config/brakeman.ignore

@@ -7,7 +7,7 @@
       "check_name": "SQL",
       "message": "Possible SQL injection",
       "file": "app/models/user.rb",
-      "line": 391,
+      "line": 396,
       "link": "https://brakemanscanner.org/docs/warning_types/sql_injection/",
       "code": "User.where(\"LOWER(#{field}) = :value\", :value => val.to_s.downcase)",
       "render_path": null,
@@ -43,24 +43,24 @@
     {
       "warning_type": "Redirect",
       "warning_code": 18,
-      "fingerprint": "f234fa0eaf727b823f3730afaad2a8d559e590cbb39468d6d23f6697214ecb43",
+      "fingerprint": "de6833d84a22d2b01c5357657b8109e96310d7d3be6001c2c752e9b596f6b02d",
       "check_name": "Redirect",
       "message": "Possible unprotected redirect",
       "file": "app/controllers/orgs_controller.rb",
-      "line": 126,
+      "line": 131,
       "link": "https://brakemanscanner.org/docs/warning_types/redirect/",
-      "code": "redirect_to(\"#{shib_login_url}?#{shib_callback_url}&#{\"entityID=#{Identifier.by_scheme_name(\"shibboleth\", \"Org\").where(:identifiable => Org.where(:id => shib_params[\"shib-ds\"][:org_id])).first.value}\"}\")",
+      "code": "redirect_to(\"#{shib_login_url}?#{shib_callback_url}&#{\"entityID=#{Identifier.by_scheme_name(\"shibboleth\", \"Org\").where(:identifiable => Org.where(:id => shib_params[:org_id])).first.value}\"}\")",
       "render_path": null,
       "location": {
         "type": "method",
         "class": "OrgsController",
         "method": "shibboleth_ds_passthru"
       },
-      "user_input": "Identifier.by_scheme_name(\"shibboleth\", \"Org\").where(:identifiable => Org.where(:id => shib_params[\"shib-ds\"][:org_id])).first.value",
+      "user_input": "Identifier.by_scheme_name(\"shibboleth\", \"Org\").where(:identifiable => Org.where(:id => shib_params[:org_id])).first.value",
       "confidence": "High",
       "note": ""
     }
   ],
-  "updated": "2020-10-16 15:41:55 +0000",
-  "brakeman_version": "4.8.2"
+  "updated": "2020-12-17 10:14:39 -0800",
+  "brakeman_version": "4.10.0"
 }