[jira] [Commented] (NETBEANS-112) Welcome module (RSS) feed broken in donation

["lbruun (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/NETBEANS-112?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16238890#comment-16238890 ] 

lbruun commented on NETBEANS-112:
---------------------------------

I suspect the DTD file was removed by Oracle prior to donation because the file wasn't their to donate. This is just speculation as the [commit message|http://hg.netbeans.org/releases/rev/00ff3249694f] tells you absolutely nothing about why Oracle did what they did.

Background:  Netscape [transferred|http://www.rssboard.org/news/181/rss-090-091-moving-rss-advisory-board] the RSS 0.91 specification to the RSS Advisory Board in January 2008. From their [website|http://www.rssboard.org/rss-0-9-1-netscape] I cannot figure out what the license is for the 0.91 DTD file, but newer versions of the RSS spec seem to published under the _Creative Commons Attribution/Share Alike 2.0_ license. 

Some ideas for resolution:

# Put the DTD back into Apache NetBeans and change {{layer.xml}} accordingly, i.e. revert the change done by Oracle. This of course triggers the question about what exactly is the license for the DTD file.
# Change the RSS feed on netbeans.org site so that it publishes 
{{<!DOCTYPE rss PUBLIC "-//Netscape Communications//DTD RSS 0.91//EN" "http://www.rssboard.org/rss-0.91.dtd">}}
This will make NetBeans physically download the DTD from this location. (this may not be desirable from a security point of view, but current situation is worse)
# Leave it broken. It is not very important and netbeans.org will go away some day anyway, I guess. I think the biggest problem here is that malware detectors will see the netbeans process attempting to reach {{aol.com}} and therefore possibly flag NetBeans as malware.





> Welcome module (RSS) feed broken in donation
> --------------------------------------------
>
>                 Key: NETBEANS-112
>                 URL: https://issues.apache.org/jira/browse/NETBEANS-112
>             Project: NetBeans
>          Issue Type: Bug
>          Components: ide - Welcome
>            Reporter: lbruun
>            Priority: Minor
>         Attachments: NB-2017.png
>
>
> !NB-2017.png!
> In Apache NetBeans the RSS feeds in Welcome Page no longer works. Works on current hg main-silver and works in NB 8.2.
> The problem occurs when the downloaded XML has a doctype declaration:
> {code:xml}
> <!DOCTYPE rss PUBLIC "-//Netscape Communications//DTD RSS 0.91//EN" "http://my.netscape.com/publish/formats/rss-0.91.dtd">
> {code}
> There used to be a "registered" DTD for this in the Welcome module but it was removed as part of Oracle's cleanup prior to donation. This is why it works on current hg main-silver, but not on the donated code.
> See:
> http://hg.netbeans.org/releases/rev/66633aaa2811
> http://hg.netbeans.org/releases/rev/00ff3249694f
> Because of the removal, the XML Reader will - in the absence of a registered DTD - attempt to download the DTD from the Internet, i.e. it will attempt to download http://my.netscape.com/publish/formats/rss-0.91.dtd, which will fail because it redirects to {{aol.com}} and there isn't a DTD at that location. (duh!, I'm actually surprised that {{netscape.com}} still exists and forwards to {{aol.com}}, it's been 18 years since the acquisition !)
> The RSS feed from planetnetbeans.org (right side of screenshot) doesn't have a DOCTYPE declaration which is why it works.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)