Plugin Rules - Will this be allowed?

[WoodenJester]

Rule "Connecting to third-party Websites" stated at : http://wiki.thebuddyforum.com/index...:Getting_Products_Accepted_to_the_Buddy_Store

Connecting to third-party Websites

"I want my product to connect the user to my/another website. Is this permitted?"

Store products must notify and get permission from the end user with an 'Ok/Cancel' popup or something similar[3] before navigating to a website that is not owned by Bossland GmbH. The popup must display the full URI of the intended destination website.

It does not matter what technology is used to connect to the third-party website—javascript, a web control, a passive hyperlink that opens a page in the user's web browser, or whatever. A Dialog must be displayed before the third-party website is visited.

Why is this required?
It is common practice across the web to notify users when they are leaving the safety constraints of the current website. The popup notifies the user that a new website is about to be visited, and the website may contain vulnerabilities. It does not matter how such a website is visited to expose the user to additional risk.
Web safety is a serious security issue. More infections are being discovered each day, and many from well-known websites. The user should be informed when he is assuming additional risk.

Can I just notify the user once?
No, the warning must be made each time the user leaves the safety of a Bossland GmbH controlled environment (store product).

The plugin i'm developing at the moment saves locations for specific doodadobjects in an XML file which is loaded upon start, and written to every time a "new" dood is found.
I'm wanting to have an external XML downloaded from a fixed URL & merged with the users current one to enlarge the list (The xml/list will be used for another feature further down the line).

Does this break any rules?

Also, this might be cutting thin ice but is it allowed to have the XML uploaded & inserted to a public SQL table? (if yes, change the first question accordingly - download data from sql)

With reading the rules, it looks like this should be allowed but i'm just wanting to be 100% certain before putting any work into it.

 

[fritsjan]

how i read it, you can do this aslong if you notify the user .