8cd744db85
mention that Trust triggers reload
12 years ago
9396619f9d
security.js docstrings
12 years ago
d5b0026cf1
trust via mark cells and save, rather than trust API request
12 years ago
e7f3c05d28
remove unused get_attr_names
12 years ago
6792d38215
log excluded untrusted output
12 years ago
aaefc5f296
remove warning for stripped output
12 years ago
b5c8a51331
disable trust notebook menu item on trusted notebooks
12 years ago
1ae689f30c
Add Trust Notebook to File menu
12 years ago
46665483ed
remove struct-returning sanitize
...
only keep str-str sanitization
12 years ago
d4780c2cfc
remove security.is_safe
12 years ago
d59e44a190
default to allow_css = false
12 years ago
4d35660f3c
sanitize CSS
...
rather than removing it entirely
12 years ago
5f7f1c51ec
remove unused security warning
12 years ago
c49f04545a
don't use `result.safe` to communicate incomplete information
12 years ago
028ce17c62
fix tagName comparison
12 years ago
3897b1c39f
don't populate sanitized.safe by default
...
since it's potentially expensive.
walk nodes in is_safe
12 years ago
6384502e47
sanitize untrusted HTML output
...
rather than checking is_safe
12 years ago
3d0957c7bc
trust latex
...
If mathjax is insecure, we have big problems.
And we already trust mathjax in markdown cells,
so this is consistent.
12 years ago
367b4f85c2
wrap caja.sanitizeAttribs to trust data-* attributes
12 years ago
eec5d427a4
add cmp_tree, in case caja log can't be trusted
...
(spoiler: it can't)
12 years ago
890c0be1dd
always sanitize markdown
...
don't check if it's safe or not
12 years ago
2a0451fdde
use google-caja for sanitization
12 years ago
07cdb1e195
Adding first round of security tests of is_safe.
12 years ago
3b262912a1
Display safe HTML+SVG even if untrusted, but don't set trusted=1.
12 years ago
31c9e08fa8
Don't render insecure Markdown and show warning.
12 years ago
fa3f998295
Adding security.js with 1st attempt at is_safe.
12 years ago
92967c0baf
Addressing things in completer.js.
12 years ago
af7dd15181
Removing old keyboard handling from IPython.utils.
12 years ago
ec6ea72873
Adding utility functions.
12 years ago
ff1492f8c9
Creating new base/js/keyboard.js
12 years ago
ede116bee7
Get cell after first conditional
12 years ago
479bc6b37a
Check down too.
12 years ago
bebe51c158
Don't allow edit mode up arrow to continue past index == 0
12 years ago
8c5b32c987
Merge pull request #5223 from minrk/tiny-images
...
use on-load event to trigger resizable images
12 years ago
15fac2c1d6
make input_area css generic to cells
...
removes otherwise-identical text_cell_input class in text cells
12 years ago
983271a36f
use on-load event to trigger resizable images
...
instead of timeout, which could get incorrect size information.
closes #5219
12 years ago
88460cd212
Merge pull request #5175 from jdfreder/html-take2
...
Audit .html() calls take #2
12 years ago
88fc1a0737
Merge pull request #5146 from jdfreder/modal-fix
...
Dual mode bug fixes.
12 years ago
39d39d0ea6
s/trigger_edit_mode/edit_mode
12 years ago
c41fe67da2
Re-added removed refresh
12 years ago
3bcee30e8c
Added comments to kbm and shrunk focus_cell lines
12 years ago
69e760841a
Move should cancel blur into codecell
12 years ago
4fdc99e111
Remove notebook load log succes
12 years ago
a6f883d7f2
Couple of whiteboard logic implementation misses
12 years ago
9451589e38
implemented whiteboard logic
12 years ago
f8ab13b675
Merge pull request #5215 from ivanov/running-kernels
...
Dashboard "Running" Tab
12 years ago
938f4bdfc4
small whitespace cleanup, renamed drag_info
...
in the dashboard, I've renamed drag_info to notebook_list_info, so
applying style to notebook_list_info and running_list_info can be done
in one place.
12 years ago
eb4e674598
remove redundant checks in code
12 years ago
14239c01e4
use explicit running header name + jquery's toggle
12 years ago
0884716a7d
Re-added widget textbox blur fix FF
12 years ago
MinRK
Brian E. Granger
Jonathan Frederic
Paul Ivanov
Paul Ivanov