starred/netbox
1
0
Fork 0
mirror of https://github.com/netbox-community/netbox.git synced 2026-01-11 21:10:29 +01:00
Code Issues 273 Packages Projects Releases 10 Wiki Activity

"NetboxNews" widget undocumented, enabled by default and uses http. #7955

New Issue
Closed
opened 2025-12-29 20:30:28 +01:00 by adam · 2 comments
adam commented 2025-12-29 20:30:28 +01:00
Owner
Copy Link

Originally created by @joernheissler on GitHub (Apr 28, 2023).

NetBox version

v3.5.0

Python version

3.9

Steps to Reproduce

  1. Upgrade to NetBox v3.5.0
  2. Point the browser to the NetBox installation.

Expected Behavior

I expect NetBox to:

  • not time out.
  • not phone home or open any other network connections without being told so.
  • not to use http:// (i.e. without TLS) without being asked to.
  • document new features such as those.

Observed Behavior

e176c7d906 (diff-4a373adccec4fa4e498a96efc552b86d1ba96a39487796c66d32163e36f25279R84) created a NewsFeed widget that appears to be enabled by default. URL is "http://netbox.dev/rss/".

My firewall DROPs outbound requests, causing a huge delay before the NetBox page opens.

Please don't enable this widget by default, or if you do, document this and provide instructions on how to disable it.
And please use HTTPs!
Perhaps the code can be changed to load the feed in the background and showing the user a cached result (or error). A network timeout wouldn't then disrupt the user experience.

Originally created by @joernheissler on GitHub (Apr 28, 2023). ### NetBox version v3.5.0 ### Python version 3.9 ### Steps to Reproduce 1. Upgrade to NetBox v3.5.0 2. Point the browser to the NetBox installation. ### Expected Behavior I expect NetBox to: * not time out. * not phone home or open any other network connections without being told so. * not to use http:// (i.e. without TLS) without being asked to. * document new features such as those. ### Observed Behavior https://github.com/netbox-community/netbox/commit/e176c7d906fc64cf3c53b589dbf69e839bcc69e9#diff-4a373adccec4fa4e498a96efc552b86d1ba96a39487796c66d32163e36f25279R84 created a NewsFeed widget that appears to be enabled by default. URL is "http://netbox.dev/rss/". My firewall DROPs outbound requests, causing a huge delay before the NetBox page opens. --- Please don't enable this widget by default, or if you do, document this and provide instructions on how to disable it. And please use HTTPs! Perhaps the code can be changed to load the feed in the background and showing the user a cached result (or error). A network timeout wouldn't then disrupt the user experience.
adam closed this issue 2025-12-29 20:30:28 +01:00
adam commented 2025-12-29 20:30:28 +01:00
Author
Owner
Copy Link

@RevLaw commented on GitHub (Apr 28, 2023):

Yep, I got the same issue in the Doker image. I was scratching my head why the login is taking ages. After removing the Widget, all was fine.

For Docker, it would be nice to toggle it with an environment variable.

@RevLaw commented on GitHub (Apr 28, 2023): Yep, I got the same issue in the Doker image. I was scratching my head why the login is taking ages. After removing the Widget, all was fine. For Docker, it would be nice to toggle it with an environment variable.
adam commented 2025-12-29 20:30:29 +01:00
Author
Owner
Copy Link

@jeremystretch commented on GitHub (Apr 28, 2023):

Complaining about intentional, documented changes is not a valid use of a bug report. The time to provide such feedback was during the month-long open beta evaluation period immediately preceding the v3.5 release, in which you unfortunately opted not to participate.

If you'd like to remove the widget from your dashboard, you can easily do so. You also have the option of modifying the default dashboard configuration as detailed in the documentation.

@jeremystretch commented on GitHub (Apr 28, 2023): Complaining about intentional, documented changes is not a valid use of a bug report. The time to provide such feedback was during the month-long open beta evaluation period immediately preceding the v3.5 release, in which you unfortunately opted not to participate. If you'd like to remove the widget from your dashboard, you can easily do so. You also have the option of modifying the default dashboard configuration as detailed in the documentation.
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
beta
breaking change
complexity: high
complexity: low
complexity: medium
needs milestone
netbox
pending closure
plugin candidate
pull-request
Mirrored from GitHub Pull Request
 severity: high
severity: low
severity: medium
status: accepted
status: backlog
status: blocked
status: duplicate
status: needs owner
status: needs triage
status: revisions needed
status: under review
topic: GraphQL
topic: Internationalization
topic: OpenAPI
topic: UI/UX
topic: cabling
topic: event rules
topic: htmx navigation
topic: industrialization
topic: migrations
topic: plugins
topic: scripts
topic: templating
topic: testing
type: bug
type: deprecation
type: documentation
type: feature
type: housekeeping
type: translation
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
adam
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/netbox#7955
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?