From 5d6e425da4f78837db32178d17e9207be98536e3 Mon Sep 17 00:00:00 2001 From: Phil Date: Fri, 23 Jan 2026 12:45:00 +0000 Subject: [PATCH 1/7] Updated CHANGELOG --- CHANGELOG.md | 54 ++++++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 54 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index 3f0823a408..6affb00220 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -14,6 +14,60 @@ Since [version 8.4.0](#840---2024-01-10) the convention is that releases made wi ## Unreleased +### From FPHS - PR #870 - 2026-01-23 + +- [Changed] embedded_block in report to allow URLs with /edit - fixes #325 +- [Fixed] embedded_block in report to allow activity log URLs + +### From FPHS - PR #868 - 2026-01-22 + +- [Added] activity log access summaries in admin panel - resolves #867 + +### From FPHS - PR #865 - 2026-01-22 + +- [Added] `active_sublist_values` option to page layouts `view_options` - fixes #584 +- [Added] `sort_sublists` option to set default sort order (`'asc'` or `'desc'`) to page layouts `view_options` + +### From FPHS - PR #864 - 2026-01-22 + +- [Added] a scope to exclude a role name from a user access controls query (required coalesce to work) +- [Added] the ability to show extra calculated columns in admin index lists +- [Added] UAC summary to Dynamic Model and External Identifier admin panels - fixes #859 + +### From FPHS - PR #860 - 2026-01-21 + +- [Added] access control filtering for master tabs nav dropdown - fixed #673 + +- [Fixed] External IDs panel blank when switching participants, resolves original issue #653 incorrectly addresed by PR #855 - fixes #857 + +### From FPHS - PR #856 - 2026-01-21 + +- [Fixed] view_options.alt_width_classes not working for external ID or dynamic models displayed in master panels - fixes #389 + +### From FPHS - PR #855 - 2026-01-20 + +- [Fixed] external IDs panel not showing content when switching participants - fixed #653 + +### From FPHS - PR #854 - 2026-01-20 + +- [Fixed] error parsing JSON field when the content is an empty string - fixes #853 + +### From FPHS - PR #852 - 2026-01-20 + +- [Fixed] issue when users tried to reset their password with a previously used password, they saw confusing duplicate errors - fixes #340 + +### From FPHS - PR #851 - 2026-01-20 + +- [Fixed] switch_id_on_click for multiple external IDs - fixed #312 + +### From FPHS - PR #850 - 2026-01-20 + +- [Fixed] styling on admin log and long lines in YAML editors + +### From FPHS - PR #849 - 2026-01-20 + +- [Fixed] spec test issues + ## [9.42.1] - 2026-01-19 ### From FPHS - PR #848 - 2026-01-19 From bb00062bfbe7c9d03512cf314bf56727cc21e555 Mon Sep 17 00:00:00 2001 From: Phil Date: Fri, 23 Jan 2026 12:45:24 +0000 Subject: [PATCH 2/7] Updated gems --- Gemfile.lock | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/Gemfile.lock b/Gemfile.lock index e992c83285..64c6147146 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -107,7 +107,7 @@ GEM ansi (1.5.0) ast (2.4.3) aws-eventstream (1.4.0) - aws-partitions (1.1206.0) + aws-partitions (1.1209.0) aws-sdk-cloudwatchlogs (1.138.0) aws-sdk-core (~> 3, >= 3.241.4) aws-sigv4 (~> 1.5) @@ -199,7 +199,7 @@ GEM railties (>= 4.1.0) responders warden (~> 1.2.3) - devise-two-factor (6.3.0) + devise-two-factor (6.3.1) activesupport (>= 7.0, < 8.2) devise (>= 4.0, < 5.0) railties (>= 7.0, < 8.2) @@ -441,12 +441,12 @@ GEM rubyzip (2.3.2) sass (3.7.4) sass-listen (~> 4.0.0) - sass-embedded (1.97.2) + sass-embedded (1.97.3) google-protobuf (~> 4.31) rake (>= 13) - sass-embedded (1.97.2-arm64-darwin) + sass-embedded (1.97.3-arm64-darwin) google-protobuf (~> 4.31) - sass-embedded (1.97.2-x86_64-linux-gnu) + sass-embedded (1.97.3-x86_64-linux-gnu) google-protobuf (~> 4.31) sass-listen (4.0.0) rb-fsevent (~> 0.9, >= 0.9.4) From 59791490a130f944600bffaa4f55dd0115ed0d6f Mon Sep 17 00:00:00 2001 From: Restructure Build Process Date: Fri, 23 Jan 2026 12:51:32 +0000 Subject: [PATCH 3/7] Built and tested release-ready version '9.42.2' - dev repo --- CHANGELOG.md | 2 ++ db/dumps/current_schema.sql | 4 ++-- security/brakeman-output.md | 4 ++-- version.txt | 2 +- 4 files changed, 7 insertions(+), 5 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 6affb00220..601b484b69 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -14,6 +14,8 @@ Since [version 8.4.0](#840---2024-01-10) the convention is that releases made wi ## Unreleased +## [9.42.2] - 2026-01-23 + ### From FPHS - PR #870 - 2026-01-23 - [Changed] embedded_block in report to allow URLs with /edit - fixes #325 diff --git a/db/dumps/current_schema.sql b/db/dumps/current_schema.sql index 5586780877..701bc68b29 100644 --- a/db/dumps/current_schema.sql +++ b/db/dumps/current_schema.sql @@ -3,7 +3,7 @@ begin; -- PostgreSQL database dump -- -\restrict Xc22WOT33J32vhwOjKoaIWm17DTfh6sN5BDBKd2ZndNlCrETBDKwALR2KhOzrbo +\restrict 2JhpvDCyGSuytjZZu6pd1fPKNBzyUNOya35CXF2TQgwbemuOXfya89lQHafV5qj -- Dumped from database version 15.15 -- Dumped by pg_dump version 15.15 @@ -23299,6 +23299,6 @@ ALTER TABLE ONLY ref_data.redcap_data_dictionary_history -- PostgreSQL database dump complete -- -\unrestrict Xc22WOT33J32vhwOjKoaIWm17DTfh6sN5BDBKd2ZndNlCrETBDKwALR2KhOzrbo +\unrestrict 2JhpvDCyGSuytjZZu6pd1fPKNBzyUNOya35CXF2TQgwbemuOXfya89lQHafV5qj commit; diff --git a/security/brakeman-output.md b/security/brakeman-output.md index f103b5812c..c45895ea2a 100644 --- a/security/brakeman-output.md +++ b/security/brakeman-output.md @@ -2,7 +2,7 @@ | Application path | Rails version | Brakeman version | Started at | Duration | |---------------------|---------------|------------------|---------------------------|----------------------| -| /output/restructure | 7.2.3 | 7.1.2 | 2026-01-19 18:43:15 +0000 | 21.873932121 seconds | +| /output/restructure | 7.2.3 | 7.1.2 | 2026-01-23 12:50:05 +0000 | 20.850077809 seconds | | Checks performed | |------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| @@ -14,7 +14,7 @@ |-------------------|-------| | Controllers | 70 | | Models | 191 | -| Templates | 425 | +| Templates | 426 | | Errors | 0 | | Security Warnings | 0 (0) | | Ignored Warnings | 33 | diff --git a/version.txt b/version.txt index 797f20aaba..a4841a86c5 100644 --- a/version.txt +++ b/version.txt @@ -1 +1 @@ -9.42.1 \ No newline at end of file +9.42.2 \ No newline at end of file From 3724cd2cdafe915ba2619d9fe3fb56f96ad34d75 Mon Sep 17 00:00:00 2001 From: Phil Date: Tue, 27 Jan 2026 08:28:21 +0000 Subject: [PATCH 4/7] Added Content-Security-Policy with nonces for inline scripts and Handlebars templates - fixes #279 --- .github/agents/plan.agent.md | 2 + .github/copilot-instructions.md | 7 ++ .../rspec-system-spec.instructions.md | 27 +++-- app-scripts/parallel_test.sh | 2 +- app/assets/javascripts/app/_fpa_form_utils.js | 19 ++++ app/assets/stylesheets/admin/admin.scss | 49 ++++++++++ .../stylesheets/admin/parsed_config.scss | 28 ++++++ app/assets/stylesheets/admin/server_info.scss | 28 ++++++ app/assets/stylesheets/admin_index.css | 1 + .../stylesheets/app/activity_log.css.scss | 14 +++ app/assets/stylesheets/app/devise.css.scss | 15 +++ app/assets/stylesheets/app/e_sign.css.scss | 13 +++ .../stylesheets/app/markdown-editor.scss | 35 +++++++ app/assets/stylesheets/app/page_layouts.scss | 11 +++ app/assets/stylesheets/app/reports.scss | 39 ++++++++ .../stylesheets/app/search_results.scss | 7 ++ .../app/secure_view/secure_view.scss | 5 + app/controllers/csp_reports_controller.rb | 11 +++ app/helpers/application_helper.rb | 27 +++++ app/helpers/big_select_field_helper.rb | 16 ++- .../edit_fields/edit_form_field_helper.rb | 9 +- .../reports_common_result_cell.rb | 23 +++-- .../_common_search_results_template.html.erb | 30 +++--- .../common/_parsed_config_panel.html.erb | 28 ------ .../_def_details_field_configs.html.erb | 4 +- .../_def_version_head_identifiers.html.erb | 6 +- .../common_templates/_def_versions.html.erb | 2 +- .../admin/common_templates/_form.html.erb | 8 +- .../admin/common_templates/_index.html.erb | 4 +- .../admin/common_templates/_item.html.erb | 2 +- .../dynamic_models/_def_details.html.erb | 4 +- .../admin/external_identifier_details/new.erb | 4 +- .../message_notifications/_index.html.erb | 8 +- .../_accuracy_score_block.html.erb | 4 +- .../_general_selections_block.html.erb | 6 +- .../reference_data/_item_flags_block.html.erb | 6 +- .../reference_data/_protocol_block.html.erb | 8 +- .../_table_list_block_part.html.erb | 4 +- app/views/admin/reports/_form.html.erb | 4 +- .../form/_admin_criteria_view.html.erb | 2 +- .../form/_search_attr_definer.html.erb | 2 +- app/views/admin/server_info/index.html.erb | 4 +- .../admin/server_info/rails_log.html.erb | 10 +- .../_common_page_template_result.html.erb | 8 +- .../common_templates/_common_parts.html.erb | 46 ++++----- .../_common_template_list.html.erb | 8 +- .../_common_template_references.html.erb | 4 +- .../_common_template_result.html.erb | 20 ++-- .../_common_template_result_fields.html.erb | 28 +++--- .../common_templates/_edit_form_filestore.erb | 4 +- .../_references_results.html.erb | 8 +- .../_search_results_template.html.erb | 25 +++-- .../e_signature/_show_parts.html.erb | 8 +- .../_name_is_e_signed_document.html.erb | 4 +- .../markdown_editor/_show_editor.html.erb | 14 +-- app/views/devise/registrations/new.html.erb | 12 +-- app/views/devise/sessions/new.html.erb | 4 +- .../_search_results_template.html.erb | 4 +- .../_browse_icons_templates.html.erb | 20 ++-- .../filestore/_browse_list_templates.html.erb | 20 ++-- .../filestore/_common_template_view.html.erb | 24 ++--- .../classification/_result_template.html.erb | 8 +- .../imports/imports/_new_import_form.html.erb | 4 +- .../imports/imports/_table_notes.html.erb | 4 +- app/views/imports/imports/index.html.erb | 4 +- .../_search_results_template.html.erb | 24 ++--- app/views/layouts/_force_window_home.html.erb | 2 +- app/views/layouts/_setup_app.html.erb | 4 +- app/views/layouts/admin_application.html.erb | 17 ++-- app/views/layouts/application.html.erb | 21 ++-- .../layouts/child_error_reporter.html.erb | 4 +- app/views/layouts/e_signature.html.erb | 4 +- .../layouts/nfs_store/filestore.html.erb | 18 ++-- app/views/layouts/public_application.html.erb | 2 +- app/views/masters/_master_panels.html.erb | 24 ++--- ..._modal_pi_search_results_template.html.erb | 4 +- .../masters/_search_form_advanced.html.erb | 6 +- app/views/masters/_search_form_simple.erb | 7 +- .../_search_results_master_tabs.html.erb | 4 +- ...earch_results_master_tabs_default.html.erb | 4 +- .../masters/_search_results_parts.html.erb | 59 ++++++----- .../masters/_search_results_template.html.erb | 18 ++-- app/views/page_layouts/index.html.erb | 4 +- .../data_dictionaries/_tab_panels.html.erb | 2 +- .../project_admins/_files_block.html.erb | 4 +- .../project_admins/_metadata_block.html.erb | 2 +- app/views/reports/_criteria.html.erb | 2 +- app/views/reports/_index.html.erb | 10 +- .../reports/_insert_options_css.html.erb | 4 +- app/views/reports/_results.html.erb | 2 +- app/views/reports/_show.html.erb | 4 +- app/views/reports/criteria/_fields.html.erb | 2 +- .../_inline_search_button_block.html.erb | 2 +- app/views/reports/index.html.erb | 4 +- .../result_template/_calendar.html.erb | 4 +- .../reports/result_template/_chart.html.erb | 6 +- app/views/secure_view/_preview.html.erb | 2 +- .../_search_results_template.html.erb | 8 +- .../_search_results_template.html.erb | 28 +++--- .../_container_template.html.erb | 16 +-- app/views/user_profiles/_tabs.html.erb | 4 +- .../initializers/content_security_policy.rb | 47 +++++---- config/routes.rb | 2 + spec/support/feature_support.rb | 98 +++++++++++++++++++ .../admin/server_info_rails_log_spec.rb | 4 +- 105 files changed, 855 insertions(+), 447 deletions(-) create mode 100644 app/assets/stylesheets/admin/parsed_config.scss create mode 100644 app/controllers/csp_reports_controller.rb diff --git a/.github/agents/plan.agent.md b/.github/agents/plan.agent.md index 4d7252c48c..f0dc4b66f3 100644 --- a/.github/agents/plan.agent.md +++ b/.github/agents/plan.agent.md @@ -11,6 +11,8 @@ tools: - search/searchResults - search/usages - vscode/vscodeAPI + - execute/runInTerminal + - read/terminalLastCommand --- # Plan Mode - Strategic Planning & Architecture Assistant diff --git a/.github/copilot-instructions.md b/.github/copilot-instructions.md index f16c0f06f7..65f24687fc 100644 --- a/.github/copilot-instructions.md +++ b/.github/copilot-instructions.md @@ -37,6 +37,13 @@ For all Ruby on Rails code you write, follow these conventions: [Ruby on Rails Coding Standards](instructions/ruby-on-rails.instructions.md) +### HTML and CSS Conventions + +- Avoid adding HTML styles inline; use CSS classes instead. +- Use BEM (Block, Element, Modifier) naming conventions for CSS classes. +- If JavaScript is needed for UI behavior, preferably use appropriate postprocessors rather than inline scripts. +- If inline ` END_HTML .html_safe diff --git a/app/helpers/edit_fields/edit_form_field_helper.rb b/app/helpers/edit_fields/edit_form_field_helper.rb index cce0003e68..6b4567758f 100644 --- a/app/helpers/edit_fields/edit_form_field_helper.rb +++ b/app/helpers/edit_fields/edit_form_field_helper.rb @@ -148,15 +148,14 @@ def edit_form_field( if cw got ||= '' got = got.html_safe - got += <<~END_SCRIPT - - END_SCRIPT - .html_safe + END_JS + end end end diff --git a/app/helpers/report_results/reports_common_result_cell.rb b/app/helpers/report_results/reports_common_result_cell.rb index 097d9a54c9..0414a11f07 100644 --- a/app/helpers/report_results/reports_common_result_cell.rb +++ b/app/helpers/report_results/reports_common_result_cell.rb @@ -315,22 +315,29 @@ def cell_content_for_iframe block_id = SecureRandom.hex(10) - html = <<~END_HTML + iframe_html = <<~END_HTML - - - END_HTML + END_JS + end - html.html_safe + (iframe_html + content_script + loader_script).html_safe end private diff --git a/app/views/activity_logs/_common_search_results_template.html.erb b/app/views/activity_logs/_common_search_results_template.html.erb index 8f5f12819b..38b219b366 100644 --- a/app/views/activity_logs/_common_search_results_template.html.erb +++ b/app/views/activity_logs/_common_search_results_template.html.erb @@ -103,7 +103,7 @@ %> <%= render partial: 'common_templates/search_results_template', locals: mapped_vars %> <% end %> - - - - +<% end %> <% # Template for page layout resource results. A plain list without activity log controls. %> - +<% end %> <%# Activity Log main results including controls %> - - +<% end %> <% end %> diff --git a/app/views/admin/common/_parsed_config_panel.html.erb b/app/views/admin/common/_parsed_config_panel.html.erb index 794e2d9ae6..9ac17f6c9f 100644 --- a/app/views/admin/common/_parsed_config_panel.html.erb +++ b/app/views/admin/common/_parsed_config_panel.html.erb @@ -18,34 +18,6 @@ 
<% lines.each_with_index do |line, index| %><%= sprintf("%4d", index + 1) %> <%= ERB::Util.html_escape(line) %>
 <% end %>
- - <% else %> diff --git a/app/views/admin/common_templates/_def_details_field_configs.html.erb b/app/views/admin/common_templates/_def_details_field_configs.html.erb index 95787c9d38..bbd1e0fe87 100644 --- a/app/views/admin/common_templates/_def_details_field_configs.html.erb +++ b/app/views/admin/common_templates/_def_details_field_configs.html.erb @@ -84,7 +84,7 @@ if field_configs.present? - +<% end %> <% end %> \ No newline at end of file diff --git a/app/views/admin/common_templates/_def_version_head_identifiers.html.erb b/app/views/admin/common_templates/_def_version_head_identifiers.html.erb index b6e6708a34..de52412964 100644 --- a/app/views/admin/common_templates/_def_version_head_identifiers.html.erb +++ b/app/views/admin/common_templates/_def_version_head_identifiers.html.erb @@ -1,8 +1,8 @@ - Attribute - Previous Version - Current Version + Attribute + Previous Version + Current Version <% # Show key identifying information in the header diff --git a/app/views/admin/common_templates/_def_versions.html.erb b/app/views/admin/common_templates/_def_versions.html.erb index b218304d0d..7ab44e537f 100644 --- a/app/views/admin/common_templates/_def_versions.html.erb +++ b/app/views/admin/common_templates/_def_versions.html.erb @@ -4,7 +4,7 @@

No version changes to display.

<% else %> <% @version_diffs.each_with_index do |diff_data, idx| %> -
+

Version Change <%= idx + 1 %> diff --git a/app/views/admin/common_templates/_form.html.erb b/app/views/admin/common_templates/_form.html.erb index 31b6ceb679..32b28aa45e 100644 --- a/app/views/admin/common_templates/_form.html.erb +++ b/app/views/admin/common_templates/_form.html.erb @@ -14,7 +14,7 @@
<% if form_info_partial %>
-
+
<% end %> <%= form_for(fref, url: url, class: "form-formatted admin-edit-form", remote: true, data: {result_target: "#admin-item-#{object_instance.id}", preprocessor: "admin_result", before_send_processor: before_send_processor}) do |f| %> <% @@ -30,10 +30,10 @@
<%= f.submit class: "btn btn-primary pull-right", value: "save" %>
<%= render partial: 'admin/common_templates/form/options_block', locals: local_vars %> <% if @show_extra_help_info && @show_extra_help_info[:text] %> -
+
-
@@ -48,7 +48,7 @@ <% if form_info_partial %>
-
+
<%= render partial: form_info_partial, locals: {object_instance: object_instance} %> diff --git a/app/views/admin/common_templates/_index.html.erb b/app/views/admin/common_templates/_index.html.erb index 994a8d177c..5ca1bb8fc0 100644 --- a/app/views/admin/common_templates/_index.html.erb +++ b/app/views/admin/common_templates/_index.html.erb @@ -56,9 +56,9 @@ <% end %>
- +<% end %> diff --git a/app/views/admin/common_templates/_item.html.erb b/app/views/admin/common_templates/_item.html.erb index 7bdc3567e3..4002dba895 100644 --- a/app/views/admin/common_templates/_item.html.erb +++ b/app/views/admin/common_templates/_item.html.erb @@ -74,7 +74,7 @@ <% if found_options %>   - <%=found_options%>: 
<%= list_item.send(found_options) %>
+ <%=found_options%>: 
<%= list_item.send(found_options) %>
<% end %> diff --git a/app/views/admin/dynamic_models/_def_details.html.erb b/app/views/admin/dynamic_models/_def_details.html.erb index 00c501118d..d8a841e195 100644 --- a/app/views/admin/dynamic_models/_def_details.html.erb +++ b/app/views/admin/dynamic_models/_def_details.html.erb @@ -180,11 +180,11 @@ if object_instance.persisted? && object_instance.enabled? && object_instance.table_or_view_ready? %> <%= render partial: 'dynamic_models/search_results_template_item', locals: { def_record: object_instance, force: true } %> <% end %> - +<% end %> diff --git a/app/views/admin/external_identifier_details/new.erb b/app/views/admin/external_identifier_details/new.erb index 58e93431db..054bce9654 100644 --- a/app/views/admin/external_identifier_details/new.erb +++ b/app/views/admin/external_identifier_details/new.erb @@ -35,9 +35,9 @@ <% end %> - +<% end %> diff --git a/app/views/admin/message_notifications/_index.html.erb b/app/views/admin/message_notifications/_index.html.erb index eb4c7ecd10..7e1a998ab9 100644 --- a/app/views/admin/message_notifications/_index.html.erb +++ b/app/views/admin/message_notifications/_index.html.erb @@ -37,9 +37,7 @@ - + <%= content_tag(:script, list_item.generate_view(ignore_missing: :show_tag).gsub('', '').html_safe, id: "message-content-#{list_item.id}", class: 'hidden', type: 'x-html', nonce: true) %> <% rescue StandardError => e %> @@ -58,7 +56,7 @@
- +<% end %> diff --git a/app/views/admin/reference_data/_accuracy_score_block.html.erb b/app/views/admin/reference_data/_accuracy_score_block.html.erb index 0ec669b575..05d996ff34 100644 --- a/app/views/admin/reference_data/_accuracy_score_block.html.erb +++ b/app/views/admin/reference_data/_accuracy_score_block.html.erb @@ -12,11 +12,11 @@

-
    +
      <% Classification::AccuracyScore.all.each do |p| %>
    • - + <%=p.value %> - <%=p.name%>
      • <% end %>
    diff --git a/app/views/admin/reference_data/_general_selections_block.html.erb b/app/views/admin/reference_data/_general_selections_block.html.erb index dbf7fad9b7..04ffe07131 100644 --- a/app/views/admin/reference_data/_general_selections_block.html.erb +++ b/app/views/admin/reference_data/_general_selections_block.html.erb @@ -14,15 +14,15 @@

-
    +
      <% Classification::GeneralSelection.item_types.each do |p| %>
    • - +
        • <% Classification::GeneralSelection.where(item_type: p).each do |gs| %> -
      • <%=gs.value%> - <%= gs.name %>
        • +
      • <%=gs.value%> - <%= gs.name %>
        • <% end %>
      <% end %> diff --git a/app/views/admin/reference_data/_item_flags_block.html.erb b/app/views/admin/reference_data/_item_flags_block.html.erb index 876944a0b0..ca08cf47a6 100644 --- a/app/views/admin/reference_data/_item_flags_block.html.erb +++ b/app/views/admin/reference_data/_item_flags_block.html.erb @@ -12,15 +12,15 @@ select * from player_infos where item_flags.item_id = player_infos.id AND item_flags.item_type = 'PlayerInfo' and item_flag_name_id = :must_have_flag

-
    +
      <% Classification::ItemFlagName.item_types.each do |p| %>
    • - +
        • <% Classification::ItemFlagName.where(item_type: p).each do |i| %> -
      • <%=i.id%> - <%=i.name%>
        • +
      • <%=i.id%> - <%=i.name%>
        • <% end %>
      <% end %> diff --git a/app/views/admin/reference_data/_protocol_block.html.erb b/app/views/admin/reference_data/_protocol_block.html.erb index bc75249eac..ec631380d2 100644 --- a/app/views/admin/reference_data/_protocol_block.html.erb +++ b/app/views/admin/reference_data/_protocol_block.html.erb @@ -31,7 +31,7 @@ end
<% end %>
-
    +
      <% pid = @filter_protocol_tree_list&.dig(:protocol_id) protocols = Classification::Protocol.all @@ -42,7 +42,7 @@ end protocols.sort.each do |p| %>
    • - <%=p.id%> <%= p.name %> + <%=p.id%> <%= p.name %>
        • <% @@ -50,10 +50,10 @@ end sub_processes = p.sub_processes.all sub_processes = sub_processes.where(id: sid) if sid sub_processes.each do |sp| %> -
      • <%=sp.id%> <%= sp.name %>
        • +
      • <%=sp.id%> <%= sp.name %>
          • <% sp.protocol_events.all.each do |pe| %> -
        • <%=pe.id%> <%= pe.name %>
          • +
        • <%=pe.id%> <%= pe.name %>
          • <% end %>
        <% end %> diff --git a/app/views/admin/reference_data/_table_list_block_part.html.erb b/app/views/admin/reference_data/_table_list_block_part.html.erb index 47710a43f9..a7762ffe77 100644 --- a/app/views/admin/reference_data/_table_list_block_part.html.erb +++ b/app/views/admin/reference_data/_table_list_block_part.html.erb @@ -1,12 +1,12 @@
        -
        +
        <%= select_tag 'primary_tables_schema_select', options_for_select(@schemas), prompt: '-- select schema --', class: 'form-control input-sm ff' %>
        diff --git a/app/views/admin/reports/_form.html.erb b/app/views/admin/reports/_form.html.erb index c002b317ec..e6f353bc9a 100644 --- a/app/views/admin/reports/_form.html.erb +++ b/app/views/admin/reports/_form.html.erb @@ -4,7 +4,7 @@
        -
        +
        <%= form_for(@report, url: url, remote: true, html: { class: "form-formatted keep-notices", 'data-before-send-processor': "report_admin_form" }) do |f| %> <%= render partial: 'admin_handler/form_errors' %> <%= render partial: 'admin/reports/form/fields', locals: {f: f} %> @@ -24,7 +24,7 @@ <%= link_to "loading...", admin_report_search_attr_definer_path, remote: true, class: 'auto-click-link keep-notices' %>
        -
        +
        <%= f.label :attributes_configuration%>
        <%= f.text_area :search_attrs, class: "report-admin-search-attr-final-config code-editor code-editor-yml", data: {code_editor_type: "yaml"}%> diff --git a/app/views/admin/reports/form/_admin_criteria_view.html.erb b/app/views/admin/reports/form/_admin_criteria_view.html.erb index 2ded757543..7d6507c3b0 100644 --- a/app/views/admin/reports/form/_admin_criteria_view.html.erb +++ b/app/views/admin/reports/form/_admin_criteria_view.html.erb @@ -32,7 +32,7 @@ <% end end%>
        -
        +
        <%= hidden_field_tag "search_attrs[#{Reports::Runner::ReportIdAttribName}]", ''%> <%= hidden_field_tag "part", 'results', id: nil%> <%= hidden_field_tag "embed", true, id: nil%> diff --git a/app/views/admin/reports/form/_search_attr_definer.html.erb b/app/views/admin/reports/form/_search_attr_definer.html.erb index a4538b6bee..e314df8c7f 100644 --- a/app/views/admin/reports/form/_search_attr_definer.html.erb +++ b/app/views/admin/reports/form/_search_attr_definer.html.erb @@ -1,7 +1,7 @@
        -
        +
        <%= label_tag :search_attributes, 'search attributes' %>
          diff --git a/app/views/admin/server_info/index.html.erb b/app/views/admin/server_info/index.html.erb index 9a1e485181..4a027217ec 100644 --- a/app/views/admin/server_info/index.html.erb +++ b/app/views/admin/server_info/index.html.erb @@ -83,10 +83,10 @@
          - \ No newline at end of file +<% end %> \ No newline at end of file diff --git a/app/views/admin/server_info/rails_log.html.erb b/app/views/admin/server_info/rails_log.html.erb index fffdba0ce4..45b80d6358 100644 --- a/app/views/admin/server_info/rails_log.html.erb +++ b/app/views/admin/server_info/rails_log.html.erb @@ -17,7 +17,7 @@
          <%= f.button 'search', class: 'btn btn-primary' %>
          -
          +
          Common searches: Default ERROR @@ -30,10 +30,10 @@
          -
          -
          - - 
          +
          
+  
          
+    
+      
           <%= @rails_log.to_s.sub(/^\s*\n/, '') %>
       
          
               
diff --git a/app/views/common_templates/_common_page_template_result.html.erb b/app/views/common_templates/_common_page_template_result.html.erb
index fe63df4028..7191035c0b 100644
--- a/app/views/common_templates/_common_page_template_result.html.erb
+++ b/app/views/common_templates/_common_page_template_result.html.erb
@@ -8,7 +8,7 @@
   # Then it simply calls the following partial "common_page_template_result_inner" with appropriate parameters.
   # Logging is included to help diagnose missing template configurations.
 %>
-
+<% end %>
 
 <%
   # Partial that renders the full activity log result item for a standalone page.
@@ -30,7 +30,7 @@
   # ability to show an edit form or create new activity log records. The attribute 'data-subscription'
   # has been provided, as has a hidden edit button, although this functionality is currently untested.
 %>
-
+<% end %>
diff --git a/app/views/common_templates/_common_parts.html.erb b/app/views/common_templates/_common_parts.html.erb
index 00395d475e..691c797cbb 100644
--- a/app/views/common_templates/_common_parts.html.erb
+++ b/app/views/common_templates/_common_parts.html.erb
@@ -4,16 +4,16 @@
 <%= render partial: 'common_templates/common_template_references' %>
 <%= render partial: 'common_templates/common_template_list' %>
 
-
+<% end %>
 
-
+<%= handlebars_template_tag('rank_button', css_class: 'hidden handlebars-partial') do %>
+{{#has 'rank'}}{{#if rank}}{{rank}} - {{rank_name}}{{else}}(no rank){{/if}}{{/has}}
+<% end %>
 
-
+<% end %>
 
-
+<% end %>
 
-
+<% end %>
 
 
-
+<% end %>
 
-
+<%= handlebars_template_tag('field_result_class', css_class: 'hidden handlebars-partial') do %>list-group-item result-field-container {{hyphenate full_name}}-{{key}} {{#if no_caption_before}}force-no-caption-before{{else is key "in" caption_before_keys_without_keep_label}}has-caption-before{{/if}} {{#is key external_id_attr}}is_external_id_item{{/is}} {{#if (fpa_state_item 'template_config' (underscore name) vdef_version 'field_options' key 'no_downcase')}}fo-no-downcase{{/if}} {{#if (fpa_state_item 'template_config' (underscore (or name_with_option_type name)) vdef_version 'field_options' key 'view_original_case')}}fo-view-original-case{{/if}}<% end %>
 
-
+<% end %>
 
-
+<% end %>
 
-
+<%= handlebars_template_tag('activity_log_data_template_name_partial', css_class: 'hidden handlebars-partial') do %>activity-log--{{#if rec_type}}{{hyphenate full_name}}-{{pluralize rec_type}}{{else}}{{hyphenate (pluralize full_name)}}{{/if}}-main-result-template<% end %>
 
 <%
 # The show button appears at the top of a parent item, such as a player_contact with record type phone
 %>
-
+<% end %>
diff --git a/app/views/common_templates/_common_template_list.html.erb b/app/views/common_templates/_common_template_list.html.erb
index 1d7c161753..1caf64ff4d 100644
--- a/app/views/common_templates/_common_template_list.html.erb
+++ b/app/views/common_templates/_common_template_list.html.erb
@@ -5,7 +5,7 @@
   # found in `views/common_templates/_search_results_template.html.erb`
 %>
 
-
+<% end %>
 
-
+<% end %>
diff --git a/app/views/common_templates/_common_template_references.html.erb b/app/views/common_templates/_common_template_references.html.erb
index 08c0623fcd..4bd21dad1a 100644
--- a/app/views/common_templates/_common_template_references.html.erb
+++ b/app/views/common_templates/_common_template_references.html.erb
@@ -1,7 +1,7 @@
 <%
   # Handle the display of referenced items in search results.
 %>
-
+<% end %>
diff --git a/app/views/common_templates/_common_template_result.html.erb b/app/views/common_templates/_common_template_result.html.erb
index a7fc93b9c9..299d70d116 100644
--- a/app/views/common_templates/_common_template_result.html.erb
+++ b/app/views/common_templates/_common_template_result.html.erb
@@ -6,20 +6,20 @@
 %>
 
 <% # Produce HTML attributes to help identify the block of fields, applying tag substitutions to each value %>
-
+<%= handlebars_template_tag('custom_block_attrs_html', css_class: 'hidden handlebars-partial') do %>{{#each custom_block_attrs}}{{hyphenate @key}}={{{template this}}} {{/each}}<% end %>
 <% # Get the result heading caption, applying tag substitutions %>
-
-
+<%= handlebars_template_tag('show_result_caption', css_class: 'hidden handlebars-partial') do %>{{#with result_data}}{{{run_template ../caption}}}{{/with}}<% end %>
+<%= handlebars_template_tag('show_result_caption_id_hyphenated', css_class: 'hidden handlebars-partial') do %>{{#with result_data}}{{{id_hyphenate (run_template ../caption)}}}{{/with}}<% end %>
 
 <% 
   # Format extra CSS classes for the result item block. 
   # Adds in the `template_class` value set by the standard mapping. 
   # Will apply tag substitutions to the dynamic definition's `view_options.extra_class` value
 %>
-
+<%= handlebars_template_tag('result_extra_class', css_class: 'hidden handlebars-partial') do %>{{#with result_data}}{{../template_class}} {{run_template ../extra_class}}{{/with}}<% end %>
 
 
-
+<% end %>
 
 <%
   # Partial that sets up the template config for the display of a full dynamic result item, such
@@ -62,7 +62,7 @@
   # Then it simply calls the following partial "common_template_result_inner" with appropriate parameters.
   # Logging is included to help diagnose missing template configurations.
 %>
-
+<% end %>
 
 <%
   # Partial that renders the full dynamic result item, such
@@ -81,7 +81,7 @@
   # which are actually built by the OptionConfigs::TemplateOptionMapping
   # method for external identifiers, dynamic models and activity logs.
 %>
-
+<% end %>
 
 
diff --git a/app/views/common_templates/_common_template_result_fields.html.erb b/app/views/common_templates/_common_template_result_fields.html.erb
index 02a9f7f076..1a70418d15 100644
--- a/app/views/common_templates/_common_template_result_fields.html.erb
+++ b/app/views/common_templates/_common_template_result_fields.html.erb
@@ -1,4 +1,4 @@
-
+<% end %>
 
-
+<% end %>
 
-
+<% end %>
 
 
-
+<% end %>
 
 
 
-
+<% end %>
 
 
-
+<% end %>
 
-
+<% end %>
diff --git a/app/views/common_templates/_edit_form_filestore.erb b/app/views/common_templates/_edit_form_filestore.erb
index ddb66f8f63..6c1afbda75 100644
--- a/app/views/common_templates/_edit_form_filestore.erb
+++ b/app/views/common_templates/_edit_form_filestore.erb
@@ -16,13 +16,13 @@ if mr
     to_record_editable: !!mr.to_record_editable
   };
 %>
-
+<% end %>
 
          
 <% end %>
\ No newline at end of file
diff --git a/app/views/common_templates/_references_results.html.erb b/app/views/common_templates/_references_results.html.erb
index c061f99b5c..e1bbda5209 100644
--- a/app/views/common_templates/_references_results.html.erb
+++ b/app/views/common_templates/_references_results.html.erb
@@ -1,11 +1,11 @@
  
-
+<% end %>
 
-
+<% end %>
diff --git a/app/views/common_templates/_search_results_template.html.erb b/app/views/common_templates/_search_results_template.html.erb
index bca0950223..deb9f250cf 100644
--- a/app/views/common_templates/_search_results_template.html.erb
+++ b/app/views/common_templates/_search_results_template.html.erb
@@ -301,8 +301,7 @@
   end
 %>
 
-
+<% end %>
 
 
 <% 
@@ -427,30 +426,30 @@
     } %>
 
 
-
+<% end %>
 
-
+<% end %>
 
-
+<% end %>
 
-
+<% end %>
 
-
+<% end %>
 
 <% end %>
\ No newline at end of file
diff --git a/app/views/common_templates/e_signature/_show_parts.html.erb b/app/views/common_templates/e_signature/_show_parts.html.erb
index b763ada38f..1abbec55ae 100644
--- a/app/views/common_templates/e_signature/_show_parts.html.erb
+++ b/app/views/common_templates/e_signature/_show_parts.html.erb
@@ -1,9 +1,9 @@
-
+<% end %>
diff --git a/app/views/common_templates/edit_fields/_name_is_e_signed_document.html.erb b/app/views/common_templates/edit_fields/_name_is_e_signed_document.html.erb
index 3893926a2e..db04a5e6ed 100644
--- a/app/views/common_templates/edit_fields/_name_is_e_signed_document.html.erb
+++ b/app/views/common_templates/edit_fields/_name_is_e_signed_document.html.erb
@@ -1,4 +1,4 @@
-
          
-  
+
          
+  
   
 
          
diff --git a/app/views/common_templates/markdown_editor/_show_editor.html.erb b/app/views/common_templates/markdown_editor/_show_editor.html.erb
index 9512cfd3ae..cf9b1d08b0 100644
--- a/app/views/common_templates/markdown_editor/_show_editor.html.erb
+++ b/app/views/common_templates/markdown_editor/_show_editor.html.erb
@@ -9,18 +9,18 @@
 <%= form.text_area field_name_sym, class: "form-control text-notes hidden use-text-area-for-custom-editor", data: {attr_name: field_name_sym, object_name: form_object_item_type_us}  %>
 
          
   
          
-    p
-    h1
-    h2 
+    p
+    h1
+    h2 
 		<% if config[:toolbar_type] == 'advanced' %>
-		h3 
-		h4 
+		h3 
+		h4 
 		<% end %>
   
          
   
          
 		
 		
-		S
+		S
 		
 		H2
 		A1
@@ -59,7 +59,7 @@
 			
 			
 		
          
-		
+		
 	
          
 	
          
 		
diff --git a/app/views/devise/registrations/new.html.erb b/app/views/devise/registrations/new.html.erb
index 13cde712bb..1314b0f9c7 100644
--- a/app/views/devise/registrations/new.html.erb
+++ b/app/views/devise/registrations/new.html.erb
@@ -63,12 +63,12 @@
     
          
 
     
          
-      <%= f.check_box :terms_of_use, style: 'display: none;', required: true %>
+      <%= f.check_box :terms_of_use, class: 'devise-form__terms-of-use', required: true %>
       <%= f.label :terms_of_use do %>
-            
          
 
 <% if Settings::ReCaptchaSiteKey %>
-
-
+<% end %>
 <% end %>
diff --git a/app/views/devise/sessions/new.html.erb b/app/views/devise/sessions/new.html.erb
index 4ecdf41a4c..074792696d 100644
--- a/app/views/devise/sessions/new.html.erb
+++ b/app/views/devise/sessions/new.html.erb
@@ -30,7 +30,7 @@
     <%= hidden_field_tag :secure_entry, params[:secure_entry] if request.path.start_with?('/admins/sign_in') %>
 
     <% unless resource.two_factor_auth_disabled %>
-    
-
+<% end %>
 
 
 
          
diff --git a/app/views/item_flags/_search_results_template.html.erb b/app/views/item_flags/_search_results_template.html.erb
index 34bfe94f67..42706bc75b 100644
--- a/app/views/item_flags/_search_results_template.html.erb
+++ b/app/views/item_flags/_search_results_template.html.erb
@@ -1,20 +1,20 @@
 
-
+<% end %>
 
-
+<% end %>
 
 
-
+<% end %>
 
-
+<% end %>
 
 
-
+<% end %>
 
-
+<% end %>
diff --git a/app/views/layouts/_force_window_home.html.erb b/app/views/layouts/_force_window_home.html.erb
index 0a1457815f..34b7c32e0a 100644
--- a/app/views/layouts/_force_window_home.html.erb
+++ b/app/views/layouts/_force_window_home.html.erb
@@ -1 +1 @@
-
+<%= javascript_tag nonce: true do %>window.location.href="/";<% end %>
diff --git a/app/views/layouts/_setup_app.html.erb b/app/views/layouts/_setup_app.html.erb
index 3c6a66bccf..d00363f43d 100644
--- a/app/views/layouts/_setup_app.html.erb
+++ b/app/views/layouts/_setup_app.html.erb
@@ -1,7 +1,7 @@
 <%
   Application.refresh_dynamic_defs
 %>
-
+<% end %>
diff --git a/app/views/layouts/admin_application.html.erb b/app/views/layouts/admin_application.html.erb
index 555544a85f..f452c82c2b 100644
--- a/app/views/layouts/admin_application.html.erb
+++ b/app/views/layouts/admin_application.html.erb
@@ -2,18 +2,19 @@
 
   
     <%= Settings::PageTitle %>
+    <%= csp_meta_tag %>
     
 
     <%= stylesheet_link_tag    'application', media: 'all' %>
     <%= stylesheet_link_tag    'admin_index', media: 'all' %>
-    <%= javascript_include_tag 'application' %>
-    <%= javascript_include_tag 'admin_index' %>
-    
+    <% end %>
     <%= render partial: "layouts/setup_app" if current_user || current_admin %>
     <%= csrf_meta_tags %>
     
@@ -23,7 +24,7 @@
     <%= render partial: 'layouts/flash_alerts' %>
     <%= yield %>
     <%= render partial: 'layouts/help_sidebar' %>
-    
+    <% end %>
     <%= render partial: 'layouts/bootstrap_modal' %>
-    
+    <% end %>
   
 
diff --git a/app/views/layouts/application.html.erb b/app/views/layouts/application.html.erb
index 0bc43f4f60..6371cda93a 100644
--- a/app/views/layouts/application.html.erb
+++ b/app/views/layouts/application.html.erb
@@ -2,6 +2,7 @@
 
 
   <%= Settings::PageTitle %>
+  <%= csp_meta_tag %>
   
 
   <%= stylesheet_link_tag    'application', media: 'all' %>
@@ -12,16 +13,16 @@
   <%   end 
      end %>
 
-  <%= javascript_include_tag 'application' %>
+  <%= javascript_include_tag 'application', nonce: true %>
 
   <% if current_user&.app_type&.name
        fn = "app_#{current_user.app_type.name.id_underscore}.js"
        if Rails.root.join("public", "app_specific", fn).exist? %>
-  
+  <%= javascript_include_tag "/app_specific/#{fn}", nonce: true %>
   <%   end 
      end %>
 
-  
+  <% end %>
   <%= render partial: "layouts/setup_app" %>
   <%= csrf_meta_tags %>
   
-  
-  
+  <%= content_tag :style, nonce: true do %><%= template_block("ui page css - #{current_user&.app_type&.name}", markdown_to_html: false, no_substitutions: true)&.html_safe %><% end %>
+  <%= javascript_tag nonce: true do %><%= template_block("ui page js - #{current_user&.app_type&.name}", markdown_to_html: false, no_substitutions: true)&.html_safe %><% end %>
 
  id="body-top" data-user-roles="<%= user_roles_for_attr %>" data-user-id="<%= current_user&.id %>" data-admin-id="<%= current_admin&.id %>">
     <%= render partial: 'layouts/navbar/navbar' if @navbar_ready%>
@@ -54,19 +55,19 @@
       
          
     
          
   
          
-  
+  <% end %>
   <%= render partial: 'layouts/bootstrap_modal' %>
   <%= render partial: 'layouts/bootstrap_modal' %>
-  
+  <% end %>
 
 
diff --git a/app/views/layouts/child_error_reporter.html.erb b/app/views/layouts/child_error_reporter.html.erb
index c47b99722d..015f05269a 100644
--- a/app/views/layouts/child_error_reporter.html.erb
+++ b/app/views/layouts/child_error_reporter.html.erb
@@ -1,4 +1,4 @@
-
\ No newline at end of file
+<% end %>
\ No newline at end of file
diff --git a/app/views/layouts/e_signature.html.erb b/app/views/layouts/e_signature.html.erb
index c018300af3..50f0314595 100644
--- a/app/views/layouts/e_signature.html.erb
+++ b/app/views/layouts/e_signature.html.erb
@@ -1,7 +1,7 @@
 
 
   
-    
+    ") %>
   
   
     
          
diff --git a/app/views/layouts/nfs_store/filestore.html.erb b/app/views/layouts/nfs_store/filestore.html.erb
index 390bb527e7..b3a69aec24 100644
--- a/app/views/layouts/nfs_store/filestore.html.erb
+++ b/app/views/layouts/nfs_store/filestore.html.erb
@@ -5,7 +5,7 @@
     <%= csrf_meta_tags %>
 
     <%= stylesheet_link_tag    'application', media: 'all' %>
-    <%= javascript_include_tag 'application' %>
+    <%= javascript_include_tag 'application', nonce: true %>
 
 
 
@@ -13,21 +13,21 @@
 
 
 
-
+<%= javascript_include_tag "/js/vendor/jquery.ui.widget.js", nonce: true %>
 
-
+<%= javascript_include_tag "https://blueimp.github.io/JavaScript-Load-Image/js/load-image.all.min.js", nonce: true %>
 
-
+<%= javascript_include_tag "https://blueimp.github.io/JavaScript-Canvas-to-Blob/js/canvas-to-blob.min.js", nonce: true %>
 
-
+<%= javascript_include_tag "https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js", nonce: true %>
 
-
+<%= javascript_include_tag "/js/jquery.iframe-transport.js", nonce: true %>
 
-
+<%= javascript_include_tag "/js/jquery.fileupload.js", nonce: true %>
 
 
 
-
+<% end %>
 
   
 
diff --git a/app/views/layouts/public_application.html.erb b/app/views/layouts/public_application.html.erb
index 4508b23f9f..1b2eef61dd 100644
--- a/app/views/layouts/public_application.html.erb
+++ b/app/views/layouts/public_application.html.erb
@@ -5,7 +5,7 @@
     
 
     <%= stylesheet_link_tag    'application', media: 'all' %>
-    <%= javascript_include_tag 'application' %>
+    <%= javascript_include_tag 'application', nonce: true %>
     <%= csrf_meta_tags %>
     
   
diff --git a/app/views/masters/_master_panels.html.erb b/app/views/masters/_master_panels.html.erb
index 3569d15a18..2980ffffcc 100644
--- a/app/views/masters/_master_panels.html.erb
+++ b/app/views/masters/_master_panels.html.erb
@@ -14,13 +14,13 @@
   sort_sublists = (details_view_options&.sort_sublists || {}).with_indifferent_access
 %>
 
-
+<% end %>
 
-
+<% end %>
 
-
+<% end %>
 
 
-
+<% end %>
 
-
+<% end %>
 
 
-
+<% end %>
diff --git a/app/views/masters/_modal_pi_search_results_template.html.erb b/app/views/masters/_modal_pi_search_results_template.html.erb
index 6a69b5428f..c0217ebf9b 100644
--- a/app/views/masters/_modal_pi_search_results_template.html.erb
+++ b/app/views/masters/_modal_pi_search_results_template.html.erb
@@ -6,7 +6,7 @@
   no_subject_details_label = '' if no_subject_details_label == 'none'
 %>
 
-
+<% end %>
diff --git a/app/views/masters/_search_form_advanced.html.erb b/app/views/masters/_search_form_advanced.html.erb
index bf52a0c1ea..2a797f6575 100644
--- a/app/views/masters/_search_form_advanced.html.erb
+++ b/app/views/masters/_search_form_advanced.html.erb
@@ -60,7 +60,7 @@
 
       
          
           
          
-          
          
+          
          
             
           
          
 
@@ -254,8 +254,8 @@
 <% end %>
 
          
 
-
+<% end %>
diff --git a/app/views/masters/_search_form_simple.erb b/app/views/masters/_search_form_simple.erb
index 452b842a1b..8c746bfd49 100644
--- a/app/views/masters/_search_form_simple.erb
+++ b/app/views/masters/_search_form_simple.erb
@@ -39,7 +39,7 @@
       
          
       
          
           
          
-          
          
+          
          
             
           
          
       
          
@@ -51,11 +51,10 @@
     
   
          
 <%end%>
-
+<% end %>
 
 
          
diff --git a/app/views/masters/_search_results_master_tabs.html.erb b/app/views/masters/_search_results_master_tabs.html.erb
index 391c411b4e..73a8391b5d 100644
--- a/app/views/masters/_search_results_master_tabs.html.erb
+++ b/app/views/masters/_search_results_master_tabs.html.erb
@@ -1,5 +1,5 @@
 
-
+<% end %>
diff --git a/app/views/masters/_search_results_master_tabs_default.html.erb b/app/views/masters/_search_results_master_tabs_default.html.erb
index bc3410706a..f01735aa4e 100644
--- a/app/views/masters/_search_results_master_tabs_default.html.erb
+++ b/app/views/masters/_search_results_master_tabs_default.html.erb
@@ -2,7 +2,7 @@
    # The app configuration "open panels" sets if any of these are opened by default.
 default_panels = app_config_items(:open_panels) %>
 
-
+<% end %>
diff --git a/app/views/masters/_search_results_parts.html.erb b/app/views/masters/_search_results_parts.html.erb
index 4c5cf4e797..206184659c 100644
--- a/app/views/masters/_search_results_parts.html.erb
+++ b/app/views/masters/_search_results_parts.html.erb
@@ -3,32 +3,31 @@
   no_subject_details_label = app_config_text(:header_no_subject_details_label, '(no subject details)')
   no_subject_details_label = '' if no_subject_details_label == 'none'
 %>
-
+<% end %>
 
-
+<% end %>
 
 
-
+<%= handlebars_template_tag('empty-template') do %><% end %>
 
-
+<% end %>
 
-
+<% end %>
 
-
+<% end %>
 
-
+<% end %>
 
 
 
-
+<% end %>
 
-
+<% end %>
 
-
+<% end %>
 
-
+<% end %>
 
 
 
-
+<% end %>
 
-
+<% end %>
 
-
+<% end %>
 
 
-
+<% end %>
diff --git a/app/views/masters/_search_results_template.html.erb b/app/views/masters/_search_results_template.html.erb
index 6ea94659f0..aaee35f9d0 100644
--- a/app/views/masters/_search_results_template.html.erb
+++ b/app/views/masters/_search_results_template.html.erb
@@ -143,13 +143,13 @@
 <%= render partial: 'common_templates/e_signature/show_parts', locals: {} %>
 
 
-
+<%= handlebars_template_tag('empty') do %><% end %>
 
 <% 
   # Display the set of search results in the "master search" format 
   # Is rendered by the AJAX request made by `app/views/masters/search.html.erb`
 %>
-
+<% end %>
 
-
+<% end %>
 
-
+<% end %>
 
 <%
   # Render the master record tabs and panels.
@@ -189,7 +189,7 @@
   # trackers, details and external IDs are provided.
   # Otherwise the panels defined in the page layout(s) are used.
 %>
-
+<% end %>
diff --git a/app/views/page_layouts/index.html.erb b/app/views/page_layouts/index.html.erb
index 5e5af04574..4a12fb6d90 100644
--- a/app/views/page_layouts/index.html.erb
+++ b/app/views/page_layouts/index.html.erb
@@ -18,9 +18,9 @@
         
 
 
-          <%= link_to  list_item.panel_label, page_layout_path(list_item.panel_name) %>
+          <%= link_to  list_item.panel_label, page_layout_path(list_item.panel_name) %>
 
-          <%= list_item.description %>
+          <%= list_item.description %>
 
         
       <% end %>
diff --git a/app/views/redcap/data_dictionaries/_tab_panels.html.erb b/app/views/redcap/data_dictionaries/_tab_panels.html.erb
index f91e6627a2..4ebc21f136 100644
--- a/app/views/redcap/data_dictionaries/_tab_panels.html.erb
+++ b/app/views/redcap/data_dictionaries/_tab_panels.html.erb
@@ -35,7 +35,7 @@
   
          Metadata
          
   <% if @rc_data_dictionary.captured_metadata.present?%>
     
          
-      
     
          
diff --git a/app/views/redcap/project_admins/_files_block.html.erb b/app/views/redcap/project_admins/_files_block.html.erb
index 2ffe1f476b..2c0b76e73c 100644
--- a/app/views/redcap/project_admins/_files_block.html.erb
+++ b/app/views/redcap/project_admins/_files_block.html.erb
@@ -13,7 +13,7 @@
               ) %>
   project to view the stored REDCap files
          
 <% elsif object_instance&.file_store&.id %>
-
+<% end %>
 <% else %>
 
          File store not configured
          
 <% end %>
\ No newline at end of file
diff --git a/app/views/redcap/project_admins/_metadata_block.html.erb b/app/views/redcap/project_admins/_metadata_block.html.erb
index 75e847ef35..0aa17671db 100644
--- a/app/views/redcap/project_admins/_metadata_block.html.erb
+++ b/app/views/redcap/project_admins/_metadata_block.html.erb
@@ -2,7 +2,7 @@
 
          Metadata
          
 <% if object_instance.captured_project_info.present?%>
   
          
-    
   
          
diff --git a/app/views/reports/_criteria.html.erb b/app/views/reports/_criteria.html.erb
index fc3e5b1278..43b1cc3679 100644
--- a/app/views/reports/_criteria.html.erb
+++ b/app/views/reports/_criteria.html.erb
@@ -30,7 +30,7 @@
       <%= render partial: 'reports/criteria/fields' %>
       <%= render partial: 'reports/criteria/inline_search_button_block' %>
          -
          +
          <%= hidden_field_tag "search_attrs[#{Reports::Runner::ReportIdAttribName}]", ''%> <%= hidden_field_tag "part", '', id: nil%> <%= hidden_field_tag "embed", embedded_report, id: nil%> diff --git a/app/views/reports/_index.html.erb b/app/views/reports/_index.html.erb index 30f021e727..2c6a3b0a56 100644 --- a/app/views/reports/_index.html.erb +++ b/app/views/reports/_index.html.erb @@ -33,14 +33,14 @@ extra_params[:embed] = true if link_extras[:data] && link_extras[:data][:remote] end %> - + - <%= link_to list_item.name, report_path(list_item.alt_resource_name, extra_params), link_extras %> + <%= link_to list_item.name, report_path(list_item.alt_resource_name, extra_params), link_extras %> - <%= markdown_to_html content %> + <%= markdown_to_html content %> <% unless simple_view %> - - + + <% end %> diff --git a/app/views/reports/_insert_options_css.html.erb b/app/views/reports/_insert_options_css.html.erb index a05bda180c..0e56103b22 100644 --- a/app/views/reports/_insert_options_css.html.erb +++ b/app/views/reports/_insert_options_css.html.erb @@ -58,7 +58,5 @@ end if res res = res.join("\n") %> - +<%= csp_style_tag(res) %> <% end %> \ No newline at end of file diff --git a/app/views/reports/_results.html.erb b/app/views/reports/_results.html.erb index 8d9369a3f7..a3e24fe4e9 100644 --- a/app/views/reports/_results.html.erb +++ b/app/views/reports/_results.html.erb @@ -31,7 +31,7 @@ <% unless no_results_scroll %>
          back to search form - + show all results
          <% end %>
          diff --git a/app/views/reports/_show.html.erb b/app/views/reports/_show.html.erb index 51c41a5f8c..3f49eeb432 100644 --- a/app/views/reports/_show.html.erb +++ b/app/views/reports/_show.html.erb @@ -4,10 +4,10 @@ extra_classes += " report-rn--#{@report.alt_resource_name}" %> <%= render partial: 'masters/modal_pi_search_results_template' %> - +<% end %> <% if @report.editable_data? %> <% end %> diff --git a/app/views/reports/criteria/_fields.html.erb b/app/views/reports/criteria/_fields.html.erb index f42120ba80..1d43b652bb 100644 --- a/app/views/reports/criteria/_fields.html.erb +++ b/app/views/reports/criteria/_fields.html.erb @@ -20,7 +20,7 @@ configs.each do |name, config| field_res = report_criteria_field name, config, field_val, options next if field_res.blank? %> -
          +
          <%= field_res %>
          <% diff --git a/app/views/reports/criteria/_inline_search_button_block.html.erb b/app/views/reports/criteria/_inline_search_button_block.html.erb index cbd1749f0a..306abee200 100644 --- a/app/views/reports/criteria/_inline_search_button_block.html.erb +++ b/app/views/reports/criteria/_inline_search_button_block.html.erb @@ -1,5 +1,5 @@ <% if @report.editable_data? || !@report_criteria %> -
          +
          <% diff --git a/app/views/reports/index.html.erb b/app/views/reports/index.html.erb index 1cf76ffee5..41fba4e630 100644 --- a/app/views/reports/index.html.erb +++ b/app/views/reports/index.html.erb @@ -11,6 +11,6 @@
          - +<% end %> diff --git a/app/views/reports/result_template/_calendar.html.erb b/app/views/reports/result_template/_calendar.html.erb index 6fa640be04..5e952d2b51 100644 --- a/app/views/reports/result_template/_calendar.html.erb +++ b/app/views/reports/result_template/_calendar.html.erb @@ -5,7 +5,7 @@ %>
          - +<% end %> diff --git a/app/views/reports/result_template/_chart.html.erb b/app/views/reports/result_template/_chart.html.erb index d0e6b877fb..7581365fca 100644 --- a/app/views/reports/result_template/_chart.html.erb +++ b/app/views/reports/result_template/_chart.html.erb @@ -5,7 +5,7 @@ %>
          - +<% end %> diff --git a/app/views/secure_view/_preview.html.erb b/app/views/secure_view/_preview.html.erb index 821769783c..a67945b737 100644 --- a/app/views/secure_view/_preview.html.erb +++ b/app/views/secure_view/_preview.html.erb @@ -1,7 +1,7 @@ <% secure_view_defaults %> -