Reported via email:

Hello,
I noticed that the link "Leggi il nostro tutorial" in the page:
https://creativecommons.org/choose/results-one?license_code=by-sa&jurisdiction=&version=4.0&lang=it

is broken. It looks like the correct one is:
https://wiki.creativecommons.org/wiki/Website/Publish

Email from user:

The website
https://creativecommons.org/licenses/by-nc/4.0/
has a semi-broken FAQ link when clicking on "commercial use" and then
"more info".

The wrong link only leads to the FAQ overview because the link anchor
(#...) is wrong:
https://creativecommons.org/faq/#Does_my_use_violate_the_NonCommercial_clause_of_the_licenses.3F

Corrected version that directly points to the right FAQ question:
https://creativecommons.org/faq/#does-my-use-violate-the-noncommercial-clause-of-the-licenses

Description

Warning in the console:
Allow attribute will take precedence over 'allowfullscreen'

Reproduction

1. Navigate to https://creativecommons.org/licenses/ and open inspect.
2. Go to console.
3. Warning will be visible.

Expectation

Warning needs to be silenced.

Screenshots

Environment

• Device: Laptop
• OS: Windows 10
• Browser: Google Chrome

Additional context

Resolution

• I would be interested in resolving this bug.

There's something amiss with the page the page that includes the tool for choosing a license (https://creativecommons.org/choose/). When I select the option to enter metadata, the page gets all goofed up. This happens in both Firefox and in Chrome. Screenshots included here. The first is a screenshot in Firefox, the second is a screenshot in Chrome. I’m using a Mac running Catalina version 10.15.7. Thanks! -Maran

tl;dr: Chooser outputs XMP containing xml:lang='en_US' which is wrong.
xml:lang='en-US' is correct.

Reproduce

(Have a browser request the page with accept-language:en-US,en;q=0.8 or similar) and GET: https://creativecommons.org/choose/metadata.xmp?field_commercial=y&field_derivatives=y&field_worktitle=ISSUE&field_attribute_to_name=-1&field_attribute_to_url=https://creativecommons.org/choose/

or with curl:
curl 'https://creativecommons.org/choose/metadata.xmp?field_commercial=y&field_derivatives=y&field_worktitle=ISSUE&field_attribute_to_name=-1&field_attribute_to_url=https://creativecommons.org/choose/' -H 'accept-language: en-US,en;q=0.8' 'https://creativecommons.org/choose/'

Enter RDF-parts (everything from <rdf:RDF to </rdf:RDF>) into W3C validator to receive:
Error: {W115} Primary subtag must be between 1 and 8 alpha characters: en_US[Line = 13, Column = 39]

Fix

I guess the problem is in https://github.com/creativecommons/creativecommons.org/blob/master/python_env/src/cc.engine/cc/engine/util.py#L542
as gettext might expect a language id format other than BCP47

Quick and Easy fix

add:
target_lang.replace('_','-') after this line https://github.com/creativecommons/creativecommons.org/blob/master/python_env/src/cc.engine/cc/engine/chooser/views.py#L575

Template says to include @robmyers and @little-wow ?

Describe the bug

We are currently using 2 different versions of jQuery spread across 3 different hosting providers:

1. 1.10.2
   • https://ajax.googleapis.com/ajax/libs/jquery/1.10.2/jquery.min.js
     • See source file cc/engine/templates/chooser_pages/interactive_chooser.html:Line 9
2. 1.12.4
   • https://ajax.googleapis.com/ajax/libs/jquery/1.12.4/jquery.min.js
     • See source file cc/engine/templates/catalog_pages/licenses-index.html:Line 86
     • update outdated jquery version used in license index template by hugosolar · Pull Request #14
   • https://creativecommons.org/wordpress/wp-includes/js/jquery/jquery.js?ver=1.12.3
     • (The URL query string says 1.12.3, but the file says 1.12.4)
     • See source file cc/engine/templates/macros_templates/engine.html:Line 49
   • https://code.jquery.com/jquery-1.12.4.min.js
     • See source file cc/engine/templates/macros_templates/deed.html:Line 39
     • See source file cc/engine/templates/macros_templates/pdtool_deed.html:Line 39

We should also update jQuery-Migrate to use the same CDN:

1. https://creativecommons.org/wordpress/wp-includes/js/jquery/jquery-migrate.js?ver=1.4.0
   • (The URL query string says 1.4.0, but the file says 1.4.1)
   • See source file cc/engine/templates/macros_templates/engine.html:Line 50

To Reproduce

1. Load https://creativecommons.org/licenses/
2. View source
3. Search for jquery

Expected behavior

• Single version/location
  • jquery - cdnjs.com - The best FOSS CDN for web related libraries to speed up your websites! (and Cloudflare is our current CDN)
    • Select "Copy Script Tag" from the dropdown next to the file to get HTML including Subresource Integrity - Web security | MDN
    • For example:

        <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/1.12.4/jquery.min.js" integrity="sha384-nvAa0+6Qg9clwYCGGPpDQLVpLNn0fRaROjHqs13t4Ggj3Ez50XnGQqc/r8MhnRDZ" crossorigin="anonymous"></script>

    • SRI Hash Generator is also a helpful resource

Problem

The RDFa about attribute in the deed.html template contains the hardcoded value http://creativecommons.org/licenses/by/4.0/:
https://github.com/creativecommons/cc.engine/blob/d0b93aea9920f070509569667574a6928b782241/cc/engine/templates/macros_templates/deed.html#L48

Consequence

The consequence is that the structured metadata for each license asserts those statements about <http://creativecommons.org/licenses/by/4.0/>, regardless of which actual license page is served. Thus, these statements are mostly wrong.

Solution

All that should be needed is to use {{ license.uri }} in that place instead.

Context

At the National Library of Sweden we are consuming more and more linked data automatically. We would like to link to the CC licenses in our union catalogue, and to support that we need to show their metadata (identifiers, titles etc.) in our editing and presentation interfaces. Our system can cache copies of linked metadata verbatim, but due to this issue, right now we have to tweak this on our side. We would like assist to resolve this issue if possible.

See: https://wikijs.creativecommons.org/tech/github-repo-guidelines

• A LICENSE file.
• Code owners should be defined in the CODEOWNERS file in the .github directory in the project root.
• Add Code of Conduct in a CODE_OF_CONDUCT.md file in the root directory. We can use the standard file from our .github repository.
• Add project-specific contributor guidelines in a CONTRIBUTORS.md file in the root directory. The standard file from our .github repository can be used as-is or as a starting point.
• Add the standard CC metadata YAML file.

Reported via email:

I have found two typos in the html produced by your Italian "Choose a license" page, here:
https://creativecommons.org/choose/?lang=it

Both typos show up when one uses the optional metadata part, here:
https://creativecommons.org/choose/?lang=it#metadata

typo 1:
there is a missing space just before the html span element having property="cc:attributionName".
It is produced like this:
di
and it ought to be like this:
di
that is, there is a space missing between "di" and "<span".

typo 2:
the html text related to "Source work URL"/"URL dell'opera originaria" is not translated.
When one fills in the field, the html produced is like this:

Based on a work at
and it ought to be like this:

Basato su un’opera presso

Description

CC 3.0 Armenian port Deed URLs 404. Since we have legalcode for these licenses, we must also have the Deeds. The missing deeds are probably the result of CC 3.0 Armenian port RDF files are missing · Issue #15.

Reproduction

❌ 404 Deed:

• CC BY-NC-ND 3.0 Armenia
  • Canonical URL: https://creativecommons.org/licenses/by-nc-nd/3.0/am/
• CC BY-NC-SA 3.0 Armenia
  • Canonical URL: https://creativecommons.org/licenses/by-nc-sa/3.0/am/
• CC BY-NC 3.0 Armenia
  • Canonical URL: https://creativecommons.org/licenses/by-nc/3.0/am/
• CC BY-ND 3.0 Armenia
  • Canonical URL: https://creativecommons.org/licenses/by-nd/3.0/am/
• CC BY-SA 3.0 Armenia
  • Canonical URL: https://creativecommons.org/licenses/by-sa/3.0/am/
• CC BY 3.0 Armenia
  • Canonical URL: https://creativecommons.org/licenses/by/3.0/am/

Expectation

CC 3.0 Armenian port Deed URLs 404. Since we have legalcode for these licenses, we must also have the Deeds. The missing deeds are probably the result of CC 3.0 Armenian port RDF files are missing · Issue #15.

Additional context

✅ 200 Legalcode:

• CC BY-NC-ND 3.0 Armenia
  • Canonical URL: https://creativecommons.org/licenses/by-nc-nd/3.0/am/legalcode
  • Source: creativecommons/creativecommons.org:docroot/legalcode/by-nc-nd_3.0_am.html
• CC BY-NC-SA 3.0 Armenia
  • Canonical URL: https://creativecommons.org/licenses/by-nc-sa/3.0/am/legalcode
  • Source: creativecommons/creativecommons.org:docroot/legalcode/by-nc-sa_3.0_am.html
• CC BY-NC 3.0 Armenia
  • Canonical URL: https://creativecommons.org/licenses/by-nc/3.0/am/legalcode
  • Source: creativecommons/creativecommons.org:docroot/legalcode/by-nc_3.0_am.html
• CC BY-ND 3.0 Armenia
  • Canonical URL: https://creativecommons.org/licenses/by-nd/3.0/am/legalcode
  • Source: creativecommons/creativecommons.org:docroot/legalcode/by-nd_3.0_am.html
• CC BY-SA 3.0 Armenia
  • Canonical URL: https://creativecommons.org/licenses/by-sa/3.0/am/legalcode
  • Source: creativecommons/creativecommons.org:docroot/legalcode/by-sa_3.0_am.html
• CC BY 3.0 Armenia
  • Canonical URL: https://creativecommons.org/licenses/by/3.0/am/legalcode
  • Source: creativecommons/creativecommons.org:docroot/legalcode/by_3.0_am.html

Thanks for reporting an issue, to help us file this efficiently we made this template. Feel free to ignore the template if you wish :)

If this is a bug or a problem with one of our websites or page on one of our sites, please put the URL or page address here:

https://creativecommons.org/choose/zero/waiver

Please tell us the steps to reproduce the problem, if needed:

1. Go to the URL https://creativecommons.org/choose/zero/waiver.
2. Enter a name with HTML in it. You can test with the text "dummy <strike>".
3. Enter dummy title, tick the checkboxes, and press continue.
4. Press the "Yes, I waive" button.
5. (!) All the text after the name in the displayed HTML is striked through. The HTML you entered is placed directly in the URL bar and rendered on the page! ANY ATTACKER CAN PUT ANY HTML AND JAVASCRIPT THERE THEY WANT!

This vulnerability is called XSS, and it is pretty serious! Wikipedia link.

If the attacker can insert a script tag, which they can - Chrome will block naive script tags, but it's probably possible to get around and lots of people don't use Chrome - then the attacker can insert any malicious code they want in the page, control everything in the page, and send a link to the page with this malicious code added to anyone they want.

Many sites, such as GitHub, allow a limited subset of HTML in certain places, like this issue box. This vulnerability is neither a limited subset - AFAICT all HTML is allowed and not controlled - nor the kind of place you'd want to allow HTML - the "Name" field. It's likely that many other places in the site are also open to XSS.

This is a screenshot of how the page looks when I did what I described above in the steps to reproduce:

As you can see, it doesn't look like it should.

Please tell us a little bit about how you're accessing the site or page, such as which web browser and which version of the browser:
Google Chrome
Version 71.0.3578.98 (Official Build) (64-bit)

(You can also vist https://aboutmybrowser.com/ which will give you a link you can share with us that'll tell us everything we need to know)

You can also attach a screenshot to this issue if you have a visual bug to report. That'll help us figure it out faster. http://www.take-a-screenshot.org/ has instructions on taking screenshots.

Finally, we're going to put someone's name here, so they get alerted to the new issue and can assign it to the right person. @robmyers @little-wow

Email from user:

An official translation of the licence deeds and legal codes has been made into Te Reo Māori and these are live, but for the deeds they're not linked from the language drop-down on the other language pages.

Eg:
English https://creativecommons.org/licenses/by/4.0/deed.en has no link to
Māori https://creativecommons.org/licenses/by/4.0/deed.mi

The legal code links seem to be in place eg
English https://creativecommons.org/licenses/by-nc/4.0/legalcode.en does correctly link to
te reo Māori https://creativecommons.org/licenses/by-nc/4.0/legalcode.mi

Hopefully this is an easy fix. May be worth checking the full list at the same time though just in case another language has slipped through the cracks :-)
An official translation of the licence deeds and legal codes has been made into Te Reo Māori and these are live, but for the deeds they're not linked from the language drop-down on the other language pages.

Eg:
English https://creativecommons.org/licenses/by/4.0/deed.en has no link to
Māori https://creativecommons.org/licenses/by/4.0/deed.mi

The legal code links seem to be in place eg
English https://creativecommons.org/licenses/by-nc/4.0/legalcode.en does correctly link to
te reo Māori https://creativecommons.org/licenses/by-nc/4.0/legalcode.mi

Hopefully this is an easy fix. May be worth checking the full list at the same time though just in case another language has slipped through the cracks :-)

New chooser URL: https://chooser-beta.creativecommons.org/

Description

The ccEngine needs to serve both ports (based on jurisdiction) and translations (based on language). However, it treats both essentially the same.

Reproduction

Based on the existence of creativecommons/creativecommons.org:docroot/legalcode/by-nc-nd_3.0_am.html, both of the following legalcode URLs are served by ccEngine:

• ✅ https://creativecommons.org/licenses/by-nc-nd/3.0/am/legalcode
  • This URL is correct. The license has been ported to the Armenia jurisdiction (am ISO 3166-1 country code)
• ❌ https://creativecommons.org/licenses/by-nc-nd/3.0/legalcode.am
  • This URL is incorrect:
    • The license is a port and is legally distinct from the International (unported) version at https://creativecommons.org/licenses/by-nc-nd/3.0/legalcode.
    • The license is written in Armenian (hy RFC 5646 language tag), not Amharic (am RFC 5646 language tag).

Expectation

Ports and Translations should not be interchangeable in the URL.

Additional context

• ISO 3166-1 alpha-2 - Wikipedia
• RFC 5646 - Tags for Identifying Languages
  • List of ISO 639-1 codes - Wikipedia
• CC Ports by Jurisdiction - Creative Commons
• Frequently Asked Questions - Creative Commons
  • What are the international (“unported”) Creative Commons licenses, and why does CC offer “ported” licenses?
  • Should I choose an international license or a ported license?

The orange donation box at the bottom left of pages (such as https://creativecommons.org/licenses/by/4.0/deed.fr ) has a label ("Faites un don Maintenant") excessively long for its button in French. The last letters are invisible, as can be seen in the following screenshot:

Multiple solutions are possible:

1. Shorten the text. Strangely, the same text is translated at the top to a different French version, "Faire un don Maintenant". That version has the advantage of being shorter, and it is a (more) accurate translation of the English version. However, it remains incorrect ("m" should be lowercase) and too long. A very simple fix would be "Donner maintenant", however "Now" seems superfluous so this could be just "Donner".
2. Reduce the font size
3. Remove this box. As there is already a big donation button at the top of all pages as well as a very prominent form on the homepage, this amateur-looking box seems superfluous.

Describe the bug

Links from CC0 and BY* 4.0 Deeds to Legalcode do not maintain language selection.

ccEngine does not appear to have any knowledge of what CC0 and BY* 4.0 legalcode translations are available.

This issue was first identified and described by @mzeinstra (Thank you!)

To Reproduce

• ✅ Visit a 3.0 ported deed in Polish
  • Creative Commons — Uznanie autorstwa 3.0 Polska — CC BY 3.0 PL
    • The "licencji" link will take you to the correct legalcode in Polish
      • Pełny tekst licencji Creative Commons
• ✅ Visit the 3.0 unported deed in Polish
  • Creative Commons — Uznanie autorstwa 3.0 Unported — CC BY 3.0
    • The "licencji" link will take you to the correct legalcode in English. The unported 3.0 legalcode is not translated.
      • Creative Commons Legal Code
• ❌ Visit the 4.0 international deed in Polish
  • Creative Commons — Uznanie autorstwa 4.0 Międzynarodowe — CC BY 4.0
    • The "licencji" link will take you to the wrong legalcode in English
      • Creative Commons — Attribution 4.0 International — CC BY 4.0
    • However, a Polish translation exists:
      • Creative Commons — Uznanie autorstwa Międzynarodowa — CC BY 4.0

Expected behavior

Users who have selected/visited a translated deed should be taken to the legalcode in the same language, if it is available.

Translation Team Guidance

Until further notice, do not include the language suffix for legalcode links in the following message strings.

It is better to degrade the user experience (link to English from 4.0 deeds) than to completely break the user experience (invalid/HTTP/1.1 404 Not Found links from 2.x and 3.0 deeds)

Assuming Polish:

msgid ""
"This is a human-readable summary of the <a href=\"./legalcode\">Legal Code "
"(read the full text)</a>."

• ✅ Correct: ./legalcode
• ❌ Incorect: ./legalcode.pl
• Also see cc-archive/cc.i18n@c6cefb4

msgid ""
"This is a human-readable summary of (and not a substitute for) the <a "
"href=\"legalcode\" class=\"fulltext\">license</a>."

• ✅ Correct: legalcode
• ❌ Incorect: legalcode.pl
• Also see cc-archive/cc.i18n@2d7fde2

Related Issues

The following issues were superseded by this issue and were closed:

• Fix Port vs. Translation Legalcode Links in Deeds · Issue #623 · creativecommons/creativecommons.org (duplicates this issue for BY* 4.0)
• CC0 deed links are listing weirdly · Issue #764 · creativecommons/creativecommons.org (duplicates this issue for CC0)
• German 4.0 license links · Issue #846 · creativecommons/creativecommons.org (duplicates this issue for BY* 4.0)
• Fixes non-existing legalcode issues. by mzeinstra · Pull Request #6 · creativecommons/cc.i18n

Issues Relating to pre-4.0 Legalcode Links in Deeds

The following issues were either fixed according to the Translation Team Guidance, above, and were closed:

• ar, es_ES, hr, id, it, lv, mi, no, ro, tr, uk, zh-Hans, zh-Hant, zh_CN, zh_HK: Need to update Legalcode link translation strings (from Deeds) in Transifex · Issue #54 · creativecommons/creativecommons.org
• ja: help fix broken links in pre-4.0 Japanese deeds · Issue #92 · creativecommons/creativecommons.org
• fi: help fix broken links in pre-4.0 Finnish deeds · Issue #93 · creativecommons/creativecommons.org
• fr: 2.x and 3.0 France deeds: links to legalcode are wrong (result in HTTP status 404) · Issue #643 · creativecommons/creativecommons.org
• nl: Link to legal code in the 3.0 Dutch license · Issue #670 · creativecommons/creativecommons.org
• de:
  • 3.0 de legalcodes links problem · Issue #796 · creativecommons/creativecommons.org
  • German 2.0 legal code down · Issue #824 · creativecommons/creativecommons.org
  • Links to German 2.0 and 3.0 ports are broken on German deeds · Issue #1042 · creativecommons/creativecommons.org (duplicates the two issues, above)
• sv: Dead license link (Swedish) · Issue #946 · creativecommons/creativecommons.org
• zh_TW: 2.x and 3.0 Taiwan ported deed: links to legalcode are wrong (result in HTTP status 404) · Issue #1103 · creativecommons/creativecommons.org
• pl: Deeds & Choosers Polish translation contains faulty language assumption for legalcode links · Issue #1106 · creativecommons/creativecommons.org

‼️ 23 Language translations were updated to mitigate the issues relating to pre-4.0 Legalcode links in Deeds!

Solution Related

• Also check deed links · Issue #75 · creativecommons/cc-link-checker

Description

A Google search for cc license chooser points to https://creativecommons.org/choose/, but the subtitle of the search results exposes the HTML code of the page. Discussions on Slack has pointed to lack of description meta tags as the culprit.

Reproduction

1. Google cc license chooser or follow this

Expectation

The subtitle for the first page(Home page) and a few others shouldn't have HTML code.

Screenshots

Additional context

Slack conversation

But think about how to share website resoures again.

[svn-resources]
recipe = infrae.subversion
urls = 
    http://code.creativecommons.org/svnroot/ccwordpress/trunk/www/wp-content/themes/cc3 cc3
    http://code.creativecommons.org/svnroot/ccwordpress/trunk/www/wp-content/themes/cc3 cc3
    http://code.creativecommons.org/svnroot/ccwordpress/trunk/www/wp-content/themes/cc4 cc4
    http://code.creativecommons.org/svnroot/ccwordpress/trunk/www/wp-content/themes/cc5 cc5
    http://code.creativecommons.org/svnroot/ccwordpress/trunk/www/wp-content/themes/cc6 cc6
    http://code.creativecommons.org/svnroot/themes/creativecommons.org/trunk cctheme
    http://code.creativecommons.org/svnroot/ccwordpress/trunk/www/images images
    http://code.creativecommons.org/svnroot/ccwordpress/trunk/www/includes includes
location = cc/engine/resources

To resolve some confusion within the CC Certificate course, we need to make a small edit to this page. It has been signed off by @peterspdx.

The change is to the 1-sentence description of the Attribution-NoDerivs license, about 2/3 of the way down the page.

Currently it says: "This license allows for redistribution, commercial and non-commercial, as long as it is passed along unchanged and in whole, with credit to you."

Please change it to read: This license lets others reuse the work for any purpose, including commercially; however, it cannot be shared with others in adapted form, and credit must be provided to you.

Thank you!

Describe the bug

None of the CC0 translations have the following translated:

Learn more about CC licensing, or use the license for your own material.

Examples

As of 2019-11-26:

• CC0 without block translated: Creative Commons — CC0 1.0 Univerzalna
• CC-BY with block translated: Creative Commons — Priznanje avtorstva 4.0 Mednarodna — CC BY 4.0

Translation Details

• Key:

  <a href="http://wiki.creativecommons.org/FAQ">Learn more</a> about CC licensing, or <a id="get_this" href="%(get_this)s">use the license</a> for your own material.

• String in cc/engine/templates/macros_templates/deed.html accurately represents the Translation key and is translated, as expected:

  <a href="http://wiki.creativecommons.org/FAQ">Learn more</a> about CC licensing, or <a id="get_this" href="{{ get_this }}">use the license</a> for your own material.

• String in cc/engine/templates/licenses/zero_deed.html differs from the Translation key and is not translated:

  <a href="http://wiki.creativecommons.org/FAQ">Learn more</a> about CC licensing, or <a id="get_this" href="https://creativecommons.org/choose/zero/">use the license</a> for your own material.

Description

lang cookie is broken/useless

Reproduction

Load a ccEngine URL (ex. https://creativecommons.org/licenses/by/4.0/) and observe cookies. The lang cookie value is always %25s.

The issue lies in cc/engine/templates/includes/language_javascript.html. It appears it was written to use string formatting (ex. Node.js' util.format()), but isn't. Additionally the value %s is being URL encoded to %25s.

Expectation

If the cookie provides value, it should be set with a correct value. However, there is no indication to me that the cookie provides any value. I didn't find any support for cookies in the ccEngine python code.

Screenshots

Description

Notice appears at top of many pages:

Creative Commons has updated its Master Terms of Service and Master Privacy Policy, effective November 7, 2017. Before continuing on our websites or using our services, please review.

Reproduction

ex. https://creativecommons.org/licenses/

Expectation

Remove notice

• I would be interested in resolving this bug.

Reported via email:

In the section The Licenses of the page https://creativecommons.org/licenses/ there are issues with browser resolution scaling in Google Chrome. Portions of the page are cut off and are not accessible.

(note how there is no ability to scroll further left to display the cut-off text)