Category

Bug fix, and refactor

Overview

• The upstream NIST API used for the CVE feed for the vulnerability widget had changed, breaking the widget. I;ve updated it now, so it works again
• Adds support for an optional NIST API key (since unauthenticated requests are cappted at 5 per 30 seconds)
• There was also some invalid JS in this widget, introduced in fixes #1391 - replacing old datasource to nist #1986
• Also fixed the ETH Gas price widget, as it's API has changed too

And some other small widget improvments:

• Better error messaging - proxy now passes and displays the actual error, not just a generic "failed to fetch data" message
• CORS errors get better flagged as CORS errors, to help explain what went wrong/how to fix
• All widgets which strictly require routing through the cors proxy, now have useProxy: true enabled by default, to save yourself the bother of noticing it doesn;t work, and then adding an extra line into your YAML

Issue Number

Fixes #2099

Also fixes these older / stale / partially resolved issues relating to the vulnerability widget:

• [BUG] Vulnerability Widget not loading #1885
• [BUG] CVE-Vulnerabilities widget no longer works as of November 2023 #1391
• [BUG] Vulnerabilities Widget Not Loading #1065
• [BUG] CVE-Vulnerabilities widget calling non-existent method #2099

Additional Info