[ http://jira.magnolia.info/browse/MAGNOLIA-540?page=all ]
Fabrizio Giustina closed MAGNOLIA-540.
--------------------------------------
Resolution: Fixed
Assignee: Fabrizio Giustina (was: Philipp Bracher)
> that's great, but just wanted to let you guys know that magnolia has a
> permission to redistribute cos library without any restrictions.
> We attain this license sometime last year.
well, that's great (unfortunately looks like nobody was aware of that), but
anyway switching to commons-fileupload is probably still an improvement.
I don't know if the granted license of cos is compatible with *gpl (may be) and
if it has been granted only for the redistribution of magnolia it will still be
a problem for anybody who develops anything based on magnolia (is the
"unlimited use without buying the book" transitive?).
Anyway we now have the alternative implementation with commons-fileupload fully
working, and commons-fileupload is apache2, it couldn't be better.
The switch of the default implementation has been committed to svn, note that
it should not cause any problem on upgrades since I did an "hard" switch,
renaming the commons-fileupload implementation with the same name of the
previous cos-based one)
> Replacing default multipart filter implementation (problematic
> com.oreilly.servlet package license terms)
> ---------------------------------------------------------------------------------------------------------
>
> Key: MAGNOLIA-540
> URL: http://jira.magnolia.info/browse/MAGNOLIA-540
> Project: Magnolia
> Issue Type: Task
> Components: core
> Affects Versions: 2.1 Final
> Reporter: Andreas Brenk
> Assigned To: Fabrizio Giustina
> Priority: Critical
> Fix For: 3.1 M4
>
> Attachments: MultipartRequestFilter.java,
> MultipartRequestFilterTest.java
>
>
> The WAR file download contains Jason Hunter's com.oreilly.servlet package in
> the WEB-INF/lib directory. Its license terms (see
> http://servlets.com/cos/license.html) are problematic I fear.
> Especially items 5 and 6 are currently violated:
> "5. The distribution includes copyright notice as follows: "The source code,
> object code, and documentation in the com.oreilly.servlet package is
> copyright and owned by Jason Hunter." in the documentation and/or other
> materials provided with the distribution.
> 6. You reproduce the above copyright notice, this list of conditions, and the
> following disclaimer in the documentation and/or other materials provided
> with the distribution."
> Both "license.txt" and "release notes.txt" contained in the WAR file download
> do not mention anything demanded by the terms cited above.
> A problematic second point is the license for commercial usage and
> redistribution as every developer must own a copy of Jason's book or
> negotiate a seperate license.
> Jakarta Commons FileUpload (http://jakarta.apache.org/commons/fileupload/) is
> a possible replacement at least for some functionality.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://jira.magnolia.info/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
----------------------------------------------------------------
for list details see
http://documentation.magnolia.info/docs/en/editor/stayupdated.html
----------------------------------------------------------------
