1603 Commits (23494f4dddd55abdc373c6ec93cd0d6417cc57bb)

Author	SHA1	Message	Date
Jonathan Frederic	23494f4ddd	Set tabindex -1, use codemirror's events	12 years ago
Jonathan Frederic	dc6355ffb7	Prevent tab key from bubbling when the completer is open	12 years ago
Jonathan Frederic	d37ffe91b7	Fix status ind. icon bug	12 years ago
Jonathan Frederic	443083c1fd	Added some comments	12 years ago
Jonathan Frederic	7762cb0ab3	Fixed a small bug/typo	12 years ago
Jonathan Frederic	e61b6aef47	Add logic to close tt when cell is unselected	12 years ago
Jonathan Frederic	95492b0f42	Add illusion that cell is in edit mode when complete is up, ... even though it is not in focus so it is not in edit mode.	12 years ago
Jonathan Frederic	65732920eb	Remove all should cancel blur logic.	12 years ago
Jonathan Frederic	989ae4e1b3	Workaround for Tooltip & completer click focus bug.	12 years ago
Brian E. Granger	1407b4347e	Merge pull request #5268 from ellisonbg/cmd-mode ... Refactoring Notebook.command_mode	12 years ago
Min RK	aaedd1a311	Merge pull request #5283 from takluyver/widget-del ... Remove Widget.closed attribute	12 years ago
Thomas Kluyver	95dc697e3b	Remove Widget.closed attribute ... Closes gh-5282	12 years ago
MinRK	7d87978a66	fix a typo introduced by a rebased PR ... caused heading cells to appear in both rendered and unrendered state	12 years ago
Jonathan Frederic	de9b5b907e	Fab CSS	12 years ago
juhasch	72864cc83c	append Firefox overflow-x fix	12 years ago
MinRK	3588fe40a9	Merge Security Pull Request: google-caja ... Adds HTML sanitization. The basics: - untrusted HTML is always sanitized, with no warning (there is console logging for changes made) - markdown is always treated as untrusted - no warnings for simply excluded output (e.g. Javascript) - CSS tags and attributes are always stripped from untrusted HTML - never check whether HTML is "safe," only sanitize - add 'Trust notebook' to File menu	12 years ago
MinRK	54e1558c16	make trust notebook dialog a single paragraph	12 years ago
MinRK	8cd744db85	mention that Trust triggers reload	12 years ago
MinRK	9396619f9d	security.js docstrings	12 years ago
Brian E. Granger	4e0a2ee476	Make sure we are in command mode before we select a new cell.	12 years ago
Brian E. Granger	8d38e042df	Merge pull request #5158 from ivanov/fix-5157 ... log refusal to serve hidden directories	12 years ago
MinRK	d8f2e320f2	trust method docstrings	12 years ago
MinRK	d5b0026cf1	trust via mark cells and save, rather than trust API request	12 years ago
MinRK	e7f3c05d28	remove unused get_attr_names	12 years ago
MinRK	6792d38215	log excluded untrusted output	12 years ago
MinRK	aaefc5f296	remove warning for stripped output	12 years ago
MinRK	b5c8a51331	disable trust notebook menu item on trusted notebooks	12 years ago
MinRK	c9c23cd71c	cleanup test_nbmanager ... use class setUp / teardown instead of the same context manager in every test	12 years ago
MinRK	1ae689f30c	Add Trust Notebook to File menu	12 years ago
MinRK	46665483ed	remove struct-returning sanitize ... only keep str-str sanitization	12 years ago
MinRK	d4780c2cfc	remove security.is_safe	12 years ago
MinRK	d59e44a190	default to allow_css = false	12 years ago
MinRK	4d35660f3c	sanitize CSS ... rather than removing it entirely	12 years ago
MinRK	d7b1e8b45b	test style	12 years ago
MinRK	5f7f1c51ec	remove unused security warning	12 years ago
MinRK	c49f04545a	don't use `result.safe` to communicate incomplete information	12 years ago
MinRK	028ce17c62	fix tagName comparison	12 years ago
MinRK	a7dc526b2b	testing for sanitize	12 years ago
MinRK	3897b1c39f	don't populate sanitized.safe by default ... since it's potentially expensive. walk nodes in is_safe	12 years ago
MinRK	6384502e47	sanitize untrusted HTML output ... rather than checking is_safe	12 years ago
MinRK	3d0957c7bc	trust latex ... If mathjax is insecure, we have big problems. And we already trust mathjax in markdown cells, so this is consistent.	12 years ago
MinRK	4b01948200	check trust of data-attributes in sanitization	12 years ago
MinRK	367b4f85c2	wrap caja.sanitizeAttribs to trust data-* attributes	12 years ago
MinRK	c298670a4b	use html-sanitizer instead of html-css ... always scrub css (for now)	12 years ago
MinRK	eec5d427a4	add cmp_tree, in case caja log can't be trusted ... (spoiler: it can't)	12 years ago
MinRK	0da66543a0	move security js test	12 years ago
MinRK	890c0be1dd	always sanitize markdown ... don't check if it's safe or not	12 years ago
MinRK	2a0451fdde	use google-caja for sanitization	12 years ago
Brian E. Granger	07cdb1e195	Adding first round of security tests of is_safe.	12 years ago
Brian E. Granger	3b262912a1	Display safe HTML+SVG even if untrusted, but don't set trusted=1.	12 years ago