RSS widget can no longer display atom feed correctly #11373

Closed
opened 2025-12-29 21:44:20 +01:00 by adam · 1 comment
Owner

Originally created by @wols on GitHub (Jul 12, 2025).

Deployment Type

Self-hosted

NetBox Version

v4.3.3

Python Version

3.11

Steps to Reproduce

Expected Behavior

Widget should translate HTML and show clean formated text.

netbox-4.1.4

Image

Observed Behavior

Widget showes HTML code.

netbox-4.3.3

Image
Originally created by @wols on GitHub (Jul 12, 2025). ### Deployment Type Self-hosted ### NetBox Version v4.3.3 ### Python Version 3.11 ### Steps to Reproduce - Create RSS widget - Set FeedURL to https://github.com/PATH/TO/PROJECT/releases.atom ### Expected Behavior Widget should translate HTML and show clean formated text. `netbox-4.1.4` <img width="414" height="180" alt="Image" src="https://github.com/user-attachments/assets/fc91ec5e-39c1-4e54-966a-c54f9fc42546" /> ### Observed Behavior Widget showes HTML code. `netbox-4.3.3` <img width="413" height="182" alt="Image" src="https://github.com/user-attachments/assets/b4c95bdb-ff74-40e2-a935-2aec18e7e007" />
adam added the type: bug label 2025-12-29 21:44:20 +01:00
adam closed this issue 2025-12-29 21:44:20 +01:00
Author
Owner

@jnovinger commented on GitHub (Jul 14, 2025):

This changed in the v4.2.2 release, with the fix for #18379. This sort of thing was indicated as a likely side-effect in the fix. But, ultimately, I believe this is functioning as intended.

If you think there's a way to provide safe HTML rendering, while maintaining the RCE mitigation from the fix, please file a feature request and describe your solution.

@jnovinger commented on GitHub (Jul 14, 2025): This changed in the v4.2.2 release, with the fix for #18379. This sort of thing was indicated as a likely side-effect [in the fix](https://github.com/netbox-community/netbox/pull/18424#issue-2795703662). But, ultimately, I believe this is functioning as intended. If you think there's a way to provide safe HTML rendering, while maintaining the RCE mitigation from the fix, please [file a feature request](https://github.com/netbox-community/netbox/issues/new?template=01-feature_request.yaml) and describe your solution.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/netbox#11373