[jira] [Commented] (OFBIZ-10639) Cookie Consent In E-Commerce

[Nicolas Malin (Jira)]

    [ https://issues.apache.org/jira/browse/OFBIZ-10639?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16863288#comment-16863288 ]

Pierre Smits commented on OFBIZ-10639:
--------------------------------------

As always, only nobody can tell what the future holds. But there are free CDN services that quite well funded (through sponsorship), like the ASF is (or Letsencrypt).

See https://cdnjs.com/about as a good example. I have been using their references for years now. And I must say that I can't remember having ever experienced an outage because of this.

I am not talking about the customisations required for OFBiz and captured in patches committed to our repo. For those the project carries the responsibilities.

But when talking about generic libraries for css and js, like the following listed below we could consider utilising a CDN:
* jquery - https://cdnjs.cloudflare.com/ajax/libs/jquery/3.2.1/jquery.min.js
* jquery-migrate - https://cdnjs.cloudflare.com/ajax/libs/jquery-migrate/3.0.0/jquery-migrate.min.js
* jquery-ui - https://cdnjs.cloudflare.com/ajax/libs/jqueryui/1.12.1/jquery-ui.min.js
* jquery-ui-timepicker-addon.min.js - https://cdnjs.cloudflare.com/ajax/libs/jquery-ui-timepicker-addon/1.6.3/jquery-ui-timepicker-addon.min.js
* jquery.maskedinput.min.js - https://cdnjs.cloudflare.com/ajax/libs/jquery.maskedinput/1.4.1/jquery.maskedinput.min.js
* jquery.validate.min.js - https://cdnjs.cloudflare.com/ajax/libs/jquery-validate/1.19.0/jquery.validate.min.js
* jquery.cookie.min.js - https://cdnjs.cloudflare.com/ajax/libs/jquery-cookie/1.4.0/jquery.cookie.min.js
* jquery.jgrowl.min.js - https://cdnjs.cloudflare.com/ajax/libs/jquery-jgrowl/1.4.6/jquery.jgrowl.min.js
* jquery.jgrowl.min.css - https://cdnjs.cloudflare.com/ajax/libs/jquery-jgrowl/1.4.6/jquery.jgrowl.min.css

There is no need for us to maintain (unminimised) css and js libraries pulled from 3rd parties, purely for the sake of having that code in our repo. What we do with 3rd party jar files can also be done with those css and js files. We only have to make our adopters aware that, if they don't want to risk their business on 3rd party services they can put them in their implementation.

> Cookie Consent In E-Commerce
> ----------------------------
>
>                 Key: OFBIZ-10639
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-10639
>             Project: OFBiz
>          Issue Type: New Feature
>          Components: ecommerce
>    Affects Versions: Trunk
>            Reporter: Deepak Nigam
>            Assignee: Swapnil M Mane
>            Priority: Minor
>         Attachments: OFBIZ-10639.patch, OFBIZ-10639.patch
>
>
> As per discussion on Dev ML [https://markmail.org/message/rcatehtckz6vlvuv] 
> The Cookie Law is a piece of privacy legislation that requires websites to get consent from visitors to store or retrieve any information on their computer, smartphone or tablet. It was designed to protect online privacy, by making consumers aware of how information about them is collected and used online, and give them a choice to allow it or not. 
>   
>  The EU Cookie Legislation began as a directive from the European Union. Some variation on the policy has since been adopted by all countries within the EU.
>   
>  The EU Cookie Legislation requires 4 actions from website owners who use cookies:
>  1. When someone visits your website, you need to let them know that your site uses cookies. 
>  2. You need to provide detailed information regarding how that cookie data will be utilized. 
>  3. You need to provide visitors with some means of accepting or refusing the use of cookies in your site. 
>  4. If they refuse, you need to ensure that cookies will not be placed on their machine.
>  
>  For more information about EU cookie policy, please visit [here|http://ec.europa.eu/ipg/basics/legal/cookies/index_en.htm].
>   
>  As this crucial feature is missing in OFBiz E-Commerce application, we should work towards its implementation. There are numerous open-source jQuery plugins available which we can use.

--
This message was sent by Atlassian JIRA
(v7.6.3#76005)