Return-Path: Delivered-To: apmail-incubator-general-archive@www.apache.org Received: (qmail 16077 invoked from network); 13 Nov 2010 04:17:59 -0000 Received: from unknown (HELO mail.apache.org) (140.211.11.3) by 140.211.11.9 with SMTP; 13 Nov 2010 04:17:59 -0000 Received: (qmail 65445 invoked by uid 500); 13 Nov 2010 04:18:30 -0000 Delivered-To: apmail-incubator-general-archive@incubator.apache.org Received: (qmail 65135 invoked by uid 500); 13 Nov 2010 04:18:29 -0000 Mailing-List: contact general-help@incubator.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: general@incubator.apache.org Delivered-To: mailing list general@incubator.apache.org Received: (qmail 65127 invoked by uid 99); 13 Nov 2010 04:18:28 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Sat, 13 Nov 2010 04:18:28 +0000 X-ASF-Spam-Status: No, hits=0.0 required=10.0 tests=FREEMAIL_FROM,RCVD_IN_DNSWL_NONE,SPF_PASS,T_TO_NO_BRKTS_FREEMAIL X-Spam-Check-By: apache.org Received-SPF: pass (athena.apache.org: domain of castagna.lists@googlemail.com designates 74.125.82.175 as permitted sender) Received: from [74.125.82.175] (HELO mail-wy0-f175.google.com) (74.125.82.175) by apache.org (qpsmtpd/0.29) with ESMTP; Sat, 13 Nov 2010 04:18:22 +0000 Received: by wyi11 with SMTP id 11so3155928wyi.6 for ; Fri, 12 Nov 2010 20:18:00 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlemail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from :user-agent:mime-version:to:subject:references:in-reply-to :content-type:content-transfer-encoding; bh=kimIQv3hxb7elTgwLMeO3vyrSz8j6d+S7KL2n2DzwWY=; b=LAjHe3Qx4UcnKl+zLF2Q/R4kbNHes1IrqOJLgoGGUHmH0vPToiR+p78qI1LU8D9D15 MNfOp1jPOHovUVHwbzyBFlNrE6vjXD3gHvZGvuTXoey3lmvaufhVKA4pkSEp8o6bSaSR 5p2+qUkOQWpyWSrJdFPBNI4O/Jfr8x8ZRFNLw= DomainKey-Signature: a=rsa-sha1; c=nofws; d=googlemail.com; s=gamma; h=message-id:date:from:user-agent:mime-version:to:subject:references :in-reply-to:content-type:content-transfer-encoding; b=UodHYIZC/yrHZ+5HS4vf/nz9Fgl+SZdv7o+ouGlhN/Pa2/KgCLqo1F6EytNsEkoSZx I30VMvEgaXhxuYLJty55+4AcdL/vCRpopxxXf34Ob/wlCaEt7+H0bgSsBbNor3IWmJ0F 2tmcIFn1dnjSqt5ptgRwvb8jhpM/f6sckTs1Y= Received: by 10.227.156.66 with SMTP id v2mr3335979wbw.111.1289621879435; Fri, 12 Nov 2010 20:17:59 -0800 (PST) Received: from [192.168.1.3] (79-66-223-238.dynamic.dsl.as9105.com [79.66.223.238]) by mx.google.com with ESMTPS id a17sm3348370wbe.18.2010.11.12.20.17.57 (version=TLSv1/SSLv3 cipher=RC4-MD5); Fri, 12 Nov 2010 20:17:58 -0800 (PST) Message-ID: <4CDE1174.7000608@googlemail.com> Date: Sat, 13 Nov 2010 04:17:56 +0000 From: Paolo Castagna User-Agent: Thunderbird 2.0.0.24 (X11/20100411) MIME-Version: 1.0 To: general@incubator.apache.org Subject: Re: [Proposal] Accept Jena into the Incubator References: <4CD88985.1030402@apache.org> <6395CD9F-C72C-466E-8068-EC0AF8A86010@apache.org> <4CDD06A3.9040602@epimorphics.com> <4CDD9ADA.90905@googlemail.com> <4CDDEDD3.2080102@topquadrant.com> In-Reply-To: <4CDDEDD3.2080102@topquadrant.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Jeremy Carroll wrote: > On 11/12/2010 11:51 AM, Paolo Castagna wrote: >> >> Also (from the JenaProposal): >> >> "The Jena GRDDL Reader has some additional dependencies: >> http://jena.sourceforge.net/grddl/license.html" >> >> BrowserLauncher2 could be removed in favor of a much simpler approach >> (i.e. write it in a file!). > > That is actually superseded by a Java6 facility, so I should do a small > piece of recoding and remove the dependency +1 (and, if I can help, let me know.) Of course, it would be even easier/less work, to remove the click through altogether (this is probably my favorite option). >> What other Apache projects do in a similar situation (i.e. you want >> to warn the user about some potential security issues and therefore >> you ask the user to actively agree, press a button, etc. to make sure >> the user reads it (I know, I know...))? > > The GRDDL component runs XSLT from the Web, in a sandbox. > The HP lawyer who advised, understanding the risks of running 3rd party > code, wanted an explicit user action to agree to the BSD license terms, > to have a firmer leg to stand on if the the 3rd party code proved > malicious, and the sandbox inadequate. > (The browser launcher is used only for the click through agreement to BSD) I was not able to find a single Apache project which requires a click through to 'ensure' users agree to the license. Paolo --------------------------------------------------------------------- To unsubscribe, e-mail: general-unsubscribe@incubator.apache.org For additional commands, e-mail: general-help@incubator.apache.org