Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Ruby library for generation of image galleries (thumbnails and original images viewer).
There is a demo with customization examples at project's homepage.
Hermitage requires Ruby on Rails version >= 3.2 with support of jQuery and CoffeeScript (jquery-rails and coffee-rails gems, respectively).
Add this line to your application's Gemfile:
gem 'hermitage'
And then execute:
$ bundle
Or install it yourself as:
$ gem install hermitage
Also you have to run installation script to create config file and add require statement to your application.js file.
rails generate hermitage:install
Add this line to your view:
render_gallery_for @images # or any other array of objects with image attachments
It is enough in theory.
The example from Quick Start section works well when you are using Paperclip gem for file attachment and your model looks like this:
class Image < ActiveRecord::Base
attr_accessible :file
has_attached_file :file, styles: { thumbnail: '100x100>' }
end
Then
render_gallery_for @images
will render markup for the gallery.
In other cases some configuration is necessary.
You can pass options hash to render_gallery_for
method if you want to customize Hermitage behavior.
E.g. your Photo
model has methods image_full
and image_thumb
that return path to full image and its thumbnail, respectively.
Then you can write in your view file:
render_gallery_for @photos, original: 'image_full', thumbnail: 'image_thumb'
Then Hermitage will use the specified methods to get paths to your images and thumbnails.
If the only method returns both paths according to passed parameters you can specify it like this:
render_gallery_for @posts, original: 'attachment(:full)', thumbnail: 'attachment(:thumbnail)'
Also you can specify those values by lambdas:
render_gallery_for @posts, original: -> post { post.attachment(:full) }, thumbnail: -> post { post.attachment(:thumbnail) }
Hermitage renders markup that will look nice with Twitter Bootstrap by default:
<ul class="thumbnails">
<li class="span4">
<a href="/path/to/full/image" class="thumbnail" rel="hermitage">
<img src="/path/to/thumbnail" />
</a>
</li>
</ul>
You can configure any element of this markup by overwriting list_tag
, item_tag
, list_class
, item_class
, link_class
, image_class
and title
properties.
For example this line of code:
render_gallery_for @images, list_tag: :div, item_tag: :p, item_class: 'image'
will render the following markup:
<div class="thumbnails">
<p class="image">
<a href="/path/to/full/image" class="thumbnail" rel="hermitage">
<img src="/path/to/thumbnail" />
</a>
</p>
</div>
You can add title
attribute to generated links by passing title
option to render_gallery_for
method:
render_gallery_for @images, title: 'description' # assuming that image.description returns some text
It will render something like that:
<div class="thumbnails">
...
<a href="/path/to/full/image" class="thumbnail" rel="hermitage" title="This is photo of my cat.">
...
If the link has title attribute there will be bottom panel with this text when you open the gallery.
If you are using Twitter Bootstrap framework and your gallery is inside .row-fluid
block the markup above will not look awesome.
Or maybe you have any other reasons to split the gallery into several separate galleries.
Then pass each_slice
options to render_gallery_for
method:
@images = Array.new(5, Image.new) # weird, but it's just an example
render_gallery_for @images, each_slice: 3
This code will render 2 ul
tags with 3 and 2 items in each, respectively. Nevertheless they both will be available in navigation flow when you open the image viewer.
It is more handy to use configs to customize Hermitage behavior.
When you call render_gallery_for
method Hermitage looks for config with name formed by the plural form of class name of the first element in passed array.
In the example above Hermitage tries to find :images config because first argument of render_gallery_for
method was array of Image instances.
If there is no proper config :default config is used.
Hermitage configs are described in config/initializers/hermitage.rb file. For configuration you can use DSL syntax described below.
You can overwrite :default config. These changes will be applied to all the galleries in your application.
Uncoment the following lines in config/initializers/hermitage.rb file and make some changes here:
Hermitage.configure :default do
original -> item { item.image.url(:medium) }
thumbnail -> item { image.url(:small) }
end
Now Hermitage will use image.url
method with :medium or :small argument to get images for the gallery.
When there are several galleries that need different markup it is better to use custom configs.
For example there are 2 models in your application:
class Picture < ActiveRecord::Base
def image_path(style = :large)
# magically returns correct image url for :large and :small styles
end
end
and
class Post < ActiveRecord::Base
attr_accessible :attachment
has_attached_file :attachment, styles: { tiny: '200x200>' }
end
Suppose that pictures should be rendered with Twitter Bootstrap style, but posts should be wrapped by simple blocks. Then your config/initializers/hermitage.rb could looks like this:
# Some rules for :default config if needed...
# Setup by lambdas...
Hermitage.configure :pictures do
original -> item { item.image_path }
thumbnail -> item { item.image_path(:small) }
end
# ...or by strings
Hermitage.configure :posts do
original 'attachment'
thumbnail 'attachment(:tiny)'
list_tag :div
item_tag :div
list_class 'posts'
item_class 'post'
end
Now when you write render_gallery_for @pictures
or render_gallery_for @posts
Hermitage will automatically choose the proper config.
You have noticed that it is not neccessary to specify every parameter in config or options block. So, Hermitage looks for parameters with the following priority:
render_gallery_for
method (if there are such values, of course).You can customize appearance of Hermitage image viewer. All you need is to add to any of your .js or .coffee files lines like this:
hermitage.darkening.opacity = 0
hermitage.navigationButtons.styles = { color: '#faeedd' }
In the example above the darkening will be disabled and both navigation buttons will change their color.
You can customize the following parameters:
looped
- set it to false if after the last image the first should not be shownpreloadNeighbours
- determines if next and previous images should be preloadedslideshowEffect
- how to show/hide images (correct values are 'slide' and 'fade'). Default value is 'slide'darkening.opacity
- opacity of darkening layer (0 if it should be disabled)darkening.styles
- any custom CSS for darkening layernavigationButtons.enabled
- are there navigation buttonsnavigationButtons.styles
- any custom CSS for both navigation buttonsnavigationButtons.next.styles
- any custom CSS for next navigation buttonnavigationButtons.previous.styles
- any custom CSS for previous navigation buttonnavigationButtons.next.text
- text for next navigation buttonnavigationButtons.previous.text
- text for previous navigation buttoncloseButton.enabled
- is there close buttoncloseButton.text
- close button's textcloseButton.styles
- any custom CSS for close buttonimage.styles
- any custom CSS for current imagebottomPanel.styles
- any custom CSS for bottom panelbottomPanel.text.styles
- any custom CSS for text block of bottom panelloader.image
- custom image for loaderloader.timeout
- timeout before loader animation should appearloader.styles
- custom styles for loaderminimumSize.width
- minimum width of scaled image, pxminimumSize.height
- minimum height of scaled image, pxanimationDuration
- duration of UI animations, msresizeTimeout
- timeout before moving elements to the proper places after resizing, msgit checkout -b my-new-feature
)git commit -am 'Add some feature'
)git push origin my-new-feature
)FAQs
Unknown package
We found that hermitage demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.