Opened 3 years ago

Last modified 3 years ago

#2233 new enhancement

Add support for additional news feeds in the console news

Reported by: Reportage Owned by: zzz
Priority: minor Milestone: undecided
Component: apps/console Version: 0.9.34
Keywords: news rss UX Cc:
Parent Tickets: Sensitive: no


Adding support for additional, user-configurable news feeds in the console news would be useful, allowing custom RSS feeds to be displayed in addition to the official feed.

To configure, an additional section in /confighome, using the existing table layout, would make implementation and UX simple.


Change History (6)

comment:1 Changed 3 years ago by zzz

With advanced config enabled, users can change their news feed now, and they must also install the certificate for the news provider. Nobody does that now, I don't think? Perhaps because there are no alternate feed providers, or there's no instructions on how to install a cert, or the user would lose the standard project news feed (and new router version indication).

If the latter, a second feed could be useful. Would we pick up the blocklist and new version info from the alt feed, or disallow it? If there are any feed providers out there wanting this feature, speak up. I don't know who we would trust enough to feed third-party content into the console. If the user wants to do it now as a replacement, a feed op could put instructions up on a feed site now.

comment:2 Changed 3 years ago by Reportage

The proposal is to allow adding of (any number of) arbitrary, user-configured rss feeds in the console news section without the need to install certificates or replace the existing news feed, with the onus on the user to decide whether a given source is trustworthy.

These feeds could be pulled from .i2p domains or clearnet, either via the http proxy, custom proxy, or direct (for clearnet feeds), as per the reseed configuration, configured on a per-feed basis.

Currently available feeds might include planet.i2p, trac's bug reports, bobthebuilder's update feed, torrent tracker feeds etc.

Some sanitization of feeds would be a good idea to filter out javascript or anything else that might be problematic. CSS would be trivial to handle display of embedded images etc.

Providing a UI option to configure the maximum number of displayed items on the homepage/sidebar (per feed and total), and maximum number of items to cache per feed, would be useful, as would the option to configure the expiry time (homepage/sidebar) for a given feed. The /news page could display all links for a given feed together, with a top nav displaying links for the configured name(s) for all configured feeds.

comment:3 Changed 3 years ago by zzz

It's too risky, we can't expect users to understand and accept the risks of bringing arbitrary unsigned content from a third party into the console.

We do filtering now on the news feed (with a whitelist of HTML entities) as an additional layer of security, but we can do that because we enforce and parse as strict XML. An arbitrary feed e.g. planet wouldn't be strict XML as the individual entries are HTML. We don't have a HTML parser available now and certainly don't want to add one.

Since it's manual setup, this wouldn't be widely used either. Low priorty, risky, optional.

If anybody really wants this, a new plugin would be the best way.

comment:4 Changed 3 years ago by Reportage

Valid points regarding arbitrary feeds that don't conform to the strict XML schema. So, as a modification to the proposal, how about permitting display of additional, (un)signed feeds in the console that do conform to the schema, given that filtering of strict XML is already enabled?

comment:5 Changed 3 years ago by zzz

That removes one objection, but I still don't think we want to put unsigned or untrusted third-party content into the console, or allow users to do it. There's very little value-add over simple third-party eepsites to compensate for the effort and the risk. Very unlikely we're going to do this.

comment:6 Changed 3 years ago by Reportage

The additional value is in making the console a focal point for news aggregation, and in encouraging the creation of compatible news feeds that will attract users. Currently the news section is low bandwidth and fairly dry in nature.. allowing 3rd party feeds into the console would breath some life into this feature, serving as a news hub for user-configured feeds and creating a better sense of community.

Note: See TracTickets for help on using tickets.