System, method and computer program product for publishing non-malicious third party content to a data feed

1. A computer program product, comprising a non-transitory computer usable medium having a computer readable program code embodied therein, the computer readable program code adapted to be executed by a computer to implement a method, the method comprising:

receiving, by a first system providing a data feed as a service, a request to publish within the data feed to one or more users a link to content stored by a second system;

prior to publishing the link within the data feed, determining, by the first system, whether the content is at least potentially malicious, by applying at least one predefined rule to the link without retrieving the content from the second system;

when it is determined that the content is not at least potentially malicious, publishing the link within the data feed, by the first system, for allowing the one or more users to access the content from the second system via selection of the link within the data feed; and,

when it is determined that the content is at least potentially malicious:

retrieving, by the first system, the content from the second system using the link,

determining, by the first system, which portion of the retrieved content is at least potentially malicious,

cleaning, by the first system, the portion determined to be at least potentially malicious,

storing the cleaned content in memory of the first system,

creating, by the first system, a new link to the stored cleaned content, and

publishing within the data feed, by the first system, the new link to the stored cleaned content.

2. The computer program product of claim 1 , wherein the request is received from a user via a user device separate from the second system storing the content and the first system providing the data feed as the service.

3. The computer program product of claim 1 , wherein the request includes the link that references the content at the second system.

4. The computer program product of claim 1 , wherein determining by the first system whether the content is at least potentially malicious is responsive to one of the users requesting access to the data feed for consumption of content published therein.

5. The computer program product of claim 1 , wherein cleaning the portion of the content determined to be at least potentially malicious includes removing from the content the portion of the content determined to be at least potentially malicious.

6. The computer program product of claim 1 , wherein cleaning the portion of the content determined to be at least potentially malicious includes changing an aspect of the portion of the content determined to be at least potentially malicious.

7. The computer program product of claim 1 , wherein the first system stores the at least one predefined rule and executes code to apply the at least one predefined rule to the link without retrieving the content from the second system.

8. The computer program product of claim 1 , wherein the second system is a third party server of a content provider separate from the first system providing the data feed as the service.

9. The computer program product of claim 8 , wherein the first system providing the data feed as the service is a multi-tenant on-demand database system.

10. A method, comprising:

receiving, by a first system providing a data feed as a service, a request to publish within the data feed to one or more users a link to content stored by a second system;

prior to publishing the link within the data feed, determining, by the first system, whether the content is at least potentially malicious, by applying at least one predefined rule to the link without retrieving the content from the second system;

when it is determined that the content is not at least potentially malicious, publishing the link within the data feed, by the first system, for allowing the one or more users to access the content from the second system via selection of the link within the data feed; and

when it is determined that the content is at least potentially malicious:

retrieving, by the first system, the content from the second system using the link,

determining, by the first system, which portion of the retrieved content is at least potentially malicious,

cleaning, by the first system, the portion determined to be at least potentially malicious,

storing the cleaned content in memory of the first system,

creating, by the first system, a new link to the stored cleaned content, and

publishing within the data feed, by the first system, the new link to the stored cleaned content.

11. An apparatus, comprising:

a first system providing a data feed as a service and having a processor for:

receiving, by the first system providing the data feed as the service, a request to publish within the data feed to one or more users a link to content stored by a second system;

prior to publishing the link within the data feed, determining, by the first system, whether the content is at least potentially malicious, by applying at least one predefined rule to the link without retrieving the content from the second system;

when it is determined that the content is not at least potentially malicious, publishing the link within the data feed, by the first system, for allowing the one or more users to access the content from the second system via selection of the link within the data feed; and

when it is determined that the content is at least potentially malicious:

retrieving, by the first system, the content from the second system using the link,

determining, by the first system, which portion of the retrieved content is at least potentially malicious,

cleaning, by the first system, the portion determined to be at least potentially malicious,

storing the cleaned content in memory of the first system,

creating, by the first system, a new link to the stored cleaned content, and

publishing within the data feed, by the first system, the new link to the stored cleaned content.

12. The system of claim 11 , wherein the processor is coupled to memory via a bus.