579f5101f0
restore websocket_url configurable
...
allows ws to be handled via separate proxies,
as appears to be the case on OpenShift and some other hosting services.
12 years ago
88e52b2746
Only allow iframe embedding on same origin.
12 years ago
1edc97e34a
s/cors_/allow_/
...
add notes about Tornado 4, and comments, updates per review
12 years ago
acf0da01d9
make CORS configurable
...
allows setting CORS headers.
- cors_origin sets Access-Control-Allow-Origin directly
- cors_origin_pat allows setting Access-Control-Allow-Origin via regular expression, since the header spec itself doesn’t support complex access[1]
- cors_credentials sets Access-Control-Allow-Credentials: true
To allow CORS from everywhere:
ipython notebook —NotebookApp.cors_origin='*'
12 years ago
de0a7d7850
use utils.log.get_logger where appropriate
12 years ago
3b92c7c24f
Merge pull request #6011 from minrk/no-jsonapi
...
only use zmq.jsonapi when talking to zmq sockets
12 years ago
99f52dee68
Merge pull request #5827 from takluyver/kernelspec-rest-api
...
Kernel specs REST API
12 years ago
44d2a5b62a
only use zmq.jsonapi when talking to zmq sockets
...
use stdlib json otherwise
12 years ago
f937045395
Set kernel_id before checking websocket
...
If websocket attempt fails and cross origin attempt is detected, a HTTPError(404) error is raised. However, in the process of closing connections because of this 404 error, an unhandled Attribute exception (kernel_id not an attribute) is raised. Setting the kernel_id first avoids this.
12 years ago
b06f382e9b
interrogate kernel_info to get protocol version for adaptation
12 years ago
02fa348c69
Create REST API for kernel specs
12 years ago
f824aee955
log error message when API requests fail
12 years ago
d6f2dfefea
log refusal to serve hidden files dirs
12 years ago
a01c112b0f
allow custom headers on all pages
12 years ago
37cb0fbdee
remove websocket url
...
websockets should follow the kernel URL
(normal behavior is unchanged, only unused configurability is removed)
12 years ago
a184724bdb
remove base_kernel_url
12 years ago
e1e0b19a6a
s/base_project_url/base_url/
...
deprecate NotebookApp.base_project_url
12 years ago
eb9e0be218
Small refactoring of is_hidden to take root as default kwarg.
12 years ago
0c794b5d2c
404 for hidden files to not revleal their existence.
12 years ago
243392d810
Creating and testing IPython.html.utils.is_hidden.
12 years ago
ddc9340a6a
Handle variations of name for origin
12 years ago
e06f501cd6
s/==/is/
12 years ago
7efc751d0e
Name change to same_origin
12 years ago
60ab030e52
Verify that headers are set, explicitly
12 years ago
b12f002b35
Performing check only on open.
12 years ago
345de4e674
Use *args, **kwargs, log.warn
12 years ago
104275ab73
Indicate Py3 vs. Py2 codepath.
12 years ago
5800b1c625
Get rid of exc_info as there isn't an exception.
12 years ago
7b552d862d
Add Origin Checking.
12 years ago
063bfa9688
we don't bundle lessc anymore, remove its vestiges
12 years ago
c0f346c4e3
Merge pull request #4735 from minrk/better-errors
...
add some HTML error pages
12 years ago
b7563aec7c
be more specific about unknown status codes
...
per review
12 years ago
9865c4f02f
whitelist alphanumeric characters for cookie_name
...
should fix #4761
12 years ago
96c1af0ce4
Merge pull request #4715 from minrk/tornado-static-url
...
restore use of tornado static_url in templates
12 years ago
b62da23660
render custom HTML for error pages
12 years ago
57642b3847
Move notebook URL fragment regexen into IPython.html.base.handlers
12 years ago
fd0e9e865c
don't raise 404 in get_absolute_path
...
raise in validate_absolute_path, where it belongs
12 years ago
15780ad055
restore use of tornado static_url
...
instead of jinja macro that doesn't write hashes
closes #4714
12 years ago
51040fb768
Update imports for Python 3
...
2to3 fixer imports (+ manual changes)
12 years ago
4a14ed7e22
Replace references to unicode and basestring
12 years ago
4e8bc066e9
Merge pull request #4435 from minrk/tornado-tweaks
...
raise 404 on not found static file
12 years ago
7ea4db6c48
don't compute etags in static file handlers
...
etags skip cache timing, which we probably don't want. If-Modified-Since is good enough for us.
12 years ago
ff744e25cd
raise 404 on not found static file
...
master gives 403 due to empty string being outside of root
12 years ago
6fa13ebb98
bump minimum tornado version to 3.1.0
...
The no-hidden behavior of the files handler
already requires this, but instead of raising, it just doesn't hide hidden files.
Bumping the minimum version also allows much cleaner static file handler subclasses.
12 years ago
ede0297874
tweak stat walk in forbid_hidden
12 years ago
40cce4d7e3
s/os.path.sep/os.sep/
12 years ago
dbfea55e8a
stat has no st_flags on Windows (maybe elsewhere?)
12 years ago
2fcc7fe97f
forbid serving hidden files from `/files`
12 years ago
51fc769edd
Handle notebook downloads through the /files URL.
12 years ago
821514bd72
cleanup weird 404
12 years ago
MinRK
rgbkrk
Thomas Kluyver
Steven Anton
Paul Ivanov
Matthias BUSSONNIER
Brian E. Granger
Kyle Kelley