RSS service

To implement a RSS tile (https://github.com/plone/volto/issues/291) we need rest endpoints to bypass CORS problems. A POC could look like this:

A manager could post a rss url to this endpoint:

    <plone:service
      method="POST"
      name="@rss-feed"
      for="Products.CMFCore.interfaces.ISiteRoot"
      factory=".post.RssPost"
      permission="cmf.ManagePortal"
    />

Anonymous user cloud get rss feeds from this endpoint:

    <plone:service
      method="GET"
      name="@rss-feeds"
      for="Products.CMFCore.interfaces.ISiteRoot"
      factory=".get.RssFeedsGet"
      permission="zope2.View"
    />

In a first version it would be ok to just save the data in memory. On restart of the server, the first request would poll the RSS. Saving it persistent would be difficult.

For now we decided to postpone the rss tile. To much work and security issues to get it into core/restapi.

Start by reading the linked Volto issue 291 and the proposed @rss-feed and @rss-feeds service definitions. Confirm whether the RSS tile is still in scope and resolve the stated security and persistence concerns before implementation; done would require agreed REST endpoint behavior for manager-submitted and anonymous RSS access.