c49f04545a
don't use `result.safe` to communicate incomplete information
12 years ago
028ce17c62
fix tagName comparison
12 years ago
a7dc526b2b
testing for sanitize
12 years ago
3897b1c39f
don't populate sanitized.safe by default
...
since it's potentially expensive.
walk nodes in is_safe
12 years ago
6384502e47
sanitize untrusted HTML output
...
rather than checking is_safe
12 years ago
3d0957c7bc
trust latex
...
If mathjax is insecure, we have big problems.
And we already trust mathjax in markdown cells,
so this is consistent.
12 years ago
4b01948200
check trust of data-attributes in sanitization
12 years ago
367b4f85c2
wrap caja.sanitizeAttribs to trust data-* attributes
12 years ago
c298670a4b
use html-sanitizer instead of html-css
...
always scrub css (for now)
12 years ago
eec5d427a4
add cmp_tree, in case caja log can't be trusted
...
(spoiler: it can't)
12 years ago
0da66543a0
move security js test
12 years ago
890c0be1dd
always sanitize markdown
...
don't check if it's safe or not
12 years ago
2a0451fdde
use google-caja for sanitization
12 years ago
07cdb1e195
Adding first round of security tests of is_safe.
12 years ago
3b262912a1
Display safe HTML+SVG even if untrusted, but don't set trusted=1.
12 years ago
31c9e08fa8
Don't render insecure Markdown and show warning.
12 years ago
fa3f998295
Adding security.js with 1st attempt at is_safe.
12 years ago
6f4263dc74
Removing conditionals that are not needed.
12 years ago
6c8cccf9e3
fix test suite
...
is_hidden expects the file to actually exist, so I've rearranged the
logic such that is_hidden is called only after it's clear that the file
exists.
12 years ago
e374ca5ebb
Refactoring Notebook.command_mode.
12 years ago
9c5f9e3a35
Merge pull request #5265 from ellisonbg/timeout-error
...
Missing class def for TimeoutError
12 years ago
c6ddfbd0bf
Merge pull request #5267 from minrk/normalize-paths
...
normalize unicode in notebook API tests
12 years ago
b1c87debde
Adding comment about this fix.
12 years ago
052955a84a
normalize unicode in notebook API tests
...
was failing comparison on OS X
12 years ago
dd55efc45d
Missing class def for TimeoutError.
12 years ago
92967c0baf
Addressing things in completer.js.
12 years ago
af7dd15181
Removing old keyboard handling from IPython.utils.
12 years ago
929f5bc8ea
Fixing references to IPython.keycodes.
12 years ago
c76ab1d836
Adding basic tests for keyboard.js
12 years ago
ec6ea72873
Adding utility functions.
12 years ago
ff1492f8c9
Creating new base/js/keyboard.js
12 years ago
d6f2dfefea
log refusal to serve hidden files dirs
12 years ago
ede116bee7
Get cell after first conditional
12 years ago
479bc6b37a
Check down too.
12 years ago
bebe51c158
Don't allow edit mode up arrow to continue past index == 0
12 years ago
1ce7d5ec80
tour: put the right arrow on the right side
12 years ago
8c5b32c987
Merge pull request #5223 from minrk/tiny-images
...
use on-load event to trigger resizable images
12 years ago
fa6bbe66f3
Merge pull request #5153 from takluyver/dashboard-sorting
...
Dashboard sorting
closes #5151
closes #5152
12 years ago
6d0d34d7ed
entering edit mode now requires focus_cell
12 years ago
a01c112b0f
allow custom headers on all pages
12 years ago
bdbf2fe9d5
more robust forward and back tour transitions
12 years ago
ccf6128962
addressing Fernando's feedback
12 years ago
431c4dfeb6
correct instructions for updating components
12 years ago
95bd36be10
don't automatically advance the tour
12 years ago
9d1595aebb
more refinement of the tour contents
12 years ago
405017875e
tidy up and add to the tour
...
@takluyver found some typos which I fixed now
12 years ago
d11d9b4830
tidying up the tour explanation of modes
12 years ago
3a43d776c2
End tour via 'x' in upper right corner of window
12 years ago
1ee52fcbbc
pause/play buttons for starting/stopping the tour
12 years ago
5725bf80f5
use minified tour
12 years ago
600facc92d
allow tour restarting
12 years ago
abe4732aa0
fix typo in tour.js
12 years ago
5fead3cdd7
starting the tour from the menu works now
...
JavaScript makes me fond of this phrase:
When there's nothing left to burn, you have to set yourself on fire.
12 years ago
d7b569390f
more work on the tour
12 years ago
a765132684
add the tour to the page
12 years ago
52766703b4
fix typo for the location of bower.json
12 years ago
3cf601b58e
initial bootstrap tour
...
One way to get it to play currently is with a cell like this:
%%javascript
$.getScript('/static/notebook/js/tour.js')
provided that you have Bootstrap Tour installed in the components
12 years ago
15fac2c1d6
make input_area css generic to cells
...
removes otherwise-identical text_cell_input class in text cells
12 years ago
983271a36f
use on-load event to trigger resizable images
...
instead of timeout, which could get incorrect size information.
closes #5219
12 years ago
88460cd212
Merge pull request #5175 from jdfreder/html-take2
...
Audit .html() calls take #2
12 years ago
88fc1a0737
Merge pull request #5146 from jdfreder/modal-fix
...
Dual mode bug fixes.
12 years ago
39d39d0ea6
s/trigger_edit_mode/edit_mode
12 years ago
c41fe67da2
Re-added removed refresh
12 years ago
3bcee30e8c
Added comments to kbm and shrunk focus_cell lines
12 years ago
69e760841a
Move should cancel blur into codecell
12 years ago
4fdc99e111
Remove notebook load log succes
12 years ago
a6f883d7f2
Couple of whiteboard logic implementation misses
12 years ago
9451589e38
implemented whiteboard logic
12 years ago
673577cf6c
Merge pull request #5207 from Zaharid/childfireevent
...
Children fire event
12 years ago
8c1c18461c
Fix a couple of static analysis warnings
12 years ago
3698563794
Make hidden directories configurable
12 years ago
c75d4e9962
Don't attempt locale-aware sorting for now.
...
On Python 2, locale.strxfrm() can't handle unicode.
12 years ago
4fe9f8d057
Case insensitive sorting in the dashboard.
...
Closes gh-5151
12 years ago
c1e8ddc64e
Hide directories beginning with _ from the dashboard.
...
Closes gh-5152
12 years ago
f8ab13b675
Merge pull request #5215 from ivanov/running-kernels
...
Dashboard "Running" Tab
12 years ago
938f4bdfc4
small whitespace cleanup, renamed drag_info
...
in the dashboard, I've renamed drag_info to notebook_list_info, so
applying style to notebook_list_info and running_list_info can be done
in one place.
12 years ago
eb4e674598
remove redundant checks in code
12 years ago
14239c01e4
use explicit running header name + jquery's toggle
12 years ago
40ac479ae1
Merge pull request #5203 from minrk/test-log-warn
...
capture some logging/warning output in some tests
12 years ago
0884716a7d
Re-added widget textbox blur fix FF
12 years ago
bfc51c2a29
Final touches?
12 years ago
c5fb037e41
Reorg index and focus_editor params on edit_mode func
12 years ago
048ca30b0c
Remove fixes that are implemented correct in new CM
12 years ago
e847a31348
Always refresh the CM editor upon TextCell unrender.
12 years ago
b976804051
Moved edit_mode canceling logic back into cell.
12 years ago
ff37fb7a36
Standardized comments and removed last logs
12 years ago
64ae25508d
Removed change that is no longer needed
12 years ago
70086d352f
s/unfocus/blur
12 years ago
c7860d8bc8
Post in person review
...
Removed logic for reverse ordered events
Removed almost all of the log statements
Removed list for should unfocus callbacks
Removed all the logic in focus_editor
Only call focus_editor if the keyboard was used to enter edit mode
12 years ago
3595c099c2
Fixed rebase problems
12 years ago
10d79a9102
Added cell unfocus event canceller API
12 years ago
a6aaa8a886
Use is_focused for element kbman removal event
12 years ago
6f7c502157
Fixed lots of bugs
...
Half overhaul of notebook focus events...
12 years ago
206d35a89e
DEBUG
...
Added lots of log calls and a couple small 'fixes' (attempts)
12 years ago
7913305312
jshint
12 years ago
0059c317c3
Merge pull request #5216 from minrk/notebook-dir-cli
...
fixup positional arg handling in notebook app
12 years ago
4038421da6
Merge pull request #5221 from jdfreder/ctuple
...
Change widget children List to Tuple.
12 years ago
bdde544d47
don't forget base_url when updating address bar in rename
12 years ago
7d1da4c550
refer to notebooks, not kernels.
12 years ago
d8b6a1a0ba
don't validate ContainerWidget.children
...
just use a plain Tuple, so we don't have to define a new Trait
12 years ago
MinRK
Brian E. Granger
Paul Ivanov
Thomas Kluyver
Jonathan Frederic
Matthias BUSSONNIER
Paul Ivanov