769 Commits (efdbef117f17ecdf1b8bbae00aabdcef141d6f02)

Author	SHA1	Message	Date
Min RK	efdbef117f	get xsrf from cookie, not body data ... so that it can't be skimmed with a GET of the page	9 years ago
Min RK	c5bb329bf8	use tornado xsrf token in API ... - Cookie-authenticated API requests must use set X-XSRFToken header - add utils.ajax for making ajax requests, adding xsrf header from default location	9 years ago
Min RK	fb8640a072	add token_authenticated property ... indicates if a token is used for authentication, in which case xsrf checks should be skipped.	9 years ago
Min RK	8abc6dff77	enable tornado xsrf cookie	9 years ago
Min RK	8e3cc4eab4	traitlets api backport ... 4.x doesn't use traitlets 4.2 API	9 years ago
Grant Nestor	8b77f0002e	Backport PR #1994: Further highlight token info in log output	9 years ago
Min RK	dd8bf2b91b	Backport PR #1985: Ignore resize events that bubbled up and didn't come from window. ... See https://bugs.jquery.com/ticket/9841 - we were having a major slowdown in interact widgets because the output areas were triggering a 'resize' event, which was bubbling up to the window object and running a function which required a DOM read. Signed-off-by: Min RK <benjaminrk@gmail.com>	9 years ago
Min RK	6ada253bd9	Backport PR #1975: add Authorization to allowed CORS headers ... so that CORS requests can use token authentication in the Authorization header by default. cf https://github.com/jupyterlab/jupyterlab/pull/1416 Signed-off-by: Min RK <benjaminrk@gmail.com>	9 years ago
Min RK	a77d5c3133	fix carriage return handling ... The only real fix is an errant `+` on the final replacement, which would end up skipping sequential replacements. - leaves trailing `\r` on the text, if there is one - use groups to avoid unnecessary replace calls (no change) - includes test	9 years ago
Thomas Kluyver	ad5c1a2c2e	Backport PR #1972: better docs for token auth ... - clearer description of defaults in help output for token - show how to get the token on the login page - add details about token auth to the security doc closes 1944 Signed-off-by: Min RK <benjaminrk@gmail.com>	9 years ago
Min RK	7cb285d813	Backport PR #1956: Make the font size more robust against fickle browser values. ... Also change the line-height multiplier to 1.3, which is closer to what the CSS is (I think it is 1.21 something.) Thanks to williamstein and haraldschilly for bringing this to our attention: https://github.com/sagemathinc/smc/issues/1262 We also re-enable auto scrolling for Firefox, since this might have been the issue. Signed-off-by: Min RK <benjaminrk@gmail.com>	9 years ago
Grant Nestor	a53a2152dc	release 4.3	9 years ago
Kyle Kelley	8f85f90b59	Backport PR #1947: Ensure variable is set if exc_info is falsey ... Closes gh-1940 Signed-off-by: Min RK <benjaminrk@gmail.com>	9 years ago
Min RK	5c5c45fc5d	Backport PR #1939: Add debug log for static file paths ... Too often I'm trying to track down an errant extra static file path (like some javascript installed in some obscure place). This makes it easy to see exactly what is being served. Signed-off-by: Min RK <benjaminrk@gmail.com>	9 years ago
Kyle Kelley	ab791441b2	Backport PR #1938: don't check origin on token-authenticated requests ... adds LoginHandler.should_check_origin classmethod API While testing, I noticed that we were checking origin and authentication on CSP violation reports, but browsers are sending CSP reports with no Origin, meaning that no CSP report will ever be accepted. That doesn't make sense to me, so I disabled both - a CSP report can now be made from *anywhere* (no auth, no check). rgbkrk does that sound right to you? Or should it be authenticated but no origin check? Signed-off-by: Min RK <benjaminrk@gmail.com>	9 years ago
Grant Nestor	45503a8c87	Backport PR #1952: Set mimerender index in `OutputArea.display_order`	9 years ago
Thomas Kluyver	19eac71065	Backport PR #1941: Catch and log handler exceptions in events.trigger ... rather than throwing handler errors in the call to `.trigger()`, which I think we don't expect to happen (at least our code suggest we don't). Extensions can register buggy event handlers. These should not be able to cause failures in the event-triggering code paths. This should fix several avenues by which extensions (or other bugs) could prevent a notebook from loading. This closes #1602 in that the bug doesn't prevent notebook loading, but it doesn't fix the original error _parente is seeing. I don't fully understand the cause there, because notebook loading doesn't start before the page has finished loading.	9 years ago
Kyle Kelley	1292d8bcc9	Backport PR #1919: remove leftover print statement ... from 1895 Signed-off-by: Min RK <benjaminrk@gmail.com>	9 years ago
Matthias Bussonnier	17c551e92c	Backport PR #1871: Allow None for post_save_hook ... See gh-1868 We're also discussing changes to traitlets that might avoid the need for this, in ipython/traitlets 342. But this is the simple fix. Signed-off-by: Min RK <benjaminrk@gmail.com>	9 years ago
Thomas Kluyver	8d3c7fc58c	Backport PR #1861: fix notebook mime-type on download links ... notebooks are not `application/json`, they are `application/x-ipynb+json`. This fixes Safari adding the `.json` extension to notebooks on download. Signed-off-by: Min RK <benjaminrk@gmail.com>	9 years ago
Matthias Bussonnier	8ea91b94d9	Backport PR #1792: Updated Jupyter Logos to Fit New Guidelines ... I have updated all the main Jupyter logos to fit the new Brand Guidelines. Signed-off-by: Min RK <benjaminrk@gmail.com>	9 years ago
Matthias Bussonnier	9d44ea2182	Backport PR #1669: If kernel is broken, start a new session ... Fixes https://github.com/jupyter/notebook/issues/1454 Signed-off-by: Min RK <benjaminrk@gmail.com>	9 years ago
Matthias Bussonnier	930823b22a	Backport PR #1908: Improve `Notebook.render_cell_output` ... Continuation of https://github.com/jupyter/notebook/pull/1907 Signed-off-by: Min RK <benjaminrk@gmail.com>	9 years ago
Matthias Bussonnier	8eb55fd6ce	Backport PR #1907: Add `Notebook.render_cell_output` method ... Continuation of https://github.com/jupyter/notebook/pull/1866 and https://github.com/gnestor/notebook_json/pull/5 depends on this. Since extensions are _usually_ loaded after the notebook has loaded and outputs have been rendered, a mime type renderer extension requires an API method for re-rendering the output of a cell after the extension has loaded and registered its mime type using `OutputArea.register_mime_type`. This method allows extensions to do that by replacing a cell with itself which will trigger a re-render.	9 years ago
Thomas Kluyver	bffc23b704	Backport PR #1904: json_errors should be outermost decorator on API handlers ... in order to apply to 403 raised by web.authenticated	9 years ago
Min RK	c93bbb3dc9	Backport PR #1903: Allow websocket connections from scripts ... scripts don't set origin on connection we allow these on API requests, websockets should match. cc rgbkrk: is there a reason we block 'missing origin' websockets when we allow the same for API requests? Is it possible for a request from a sensible browser to be missing Host and/or Origin?	9 years ago
Kyle Kelley	b66a495073	Backport PR #1896: Accept JSON output data with mime type "application/*+json" ... Currently, output data must be a string unless the mime type equals “application/json”. This doesn’t allow JSON output data to be rendered by mime types such as “application/vnd.plotly.v1+json” or “application/vnd.vega+json”. This change simply allows JSON output data to be rendered by a custom mime renderer if the mime type includes “application/“ and “json”.	9 years ago
Kyle Kelley	e389144301	Backport PR #1895: Allow kernelspecs to have spaces in them for backward compat ... Fixes 1859	9 years ago
Kyle Kelley	f1b73dcb8c	Merge pull request #1917 from minrk/typeahead.min ... load minified typeahead.min.js	9 years ago
Thomas Kluyver	5fdc14df42	Backport PR #1887: Fix bug when attempting to remove old nbserver info files ... When list_running_servers find an old nbserver-xxxx.json info file, it attempts to delete it. It needs to use the full path rather than the filename. An exception was being raised, but the error was suppressed silently. This fixes issue 1886	9 years ago
Min RK	35998b6baa	load minified typeahead	9 years ago
Thomas Kluyver	8489faa4cf	Backport PR #1838: terminal: Bump xterm.js to 2.0.1 ... Primary fix is better copy / paste support Release notes in https://github.com/sourcelair/xterm.js/releases/tag/2.0.1 Doesn't seem to break any styling, unlike the last update I made :)	9 years ago
Yuvi Panda	5d05b7d8d3	Backport PR #1759: Fix terminal styles bug ... Fixes https://github.com/jupyter/notebook/issues/1758 Before:  After: 	9 years ago
Kyle Kelley	754f397e9e	Backport PR #1831: enable token-authentication by default ... - add `NotebookApp.login_token`, used when `NotebookApp.password` is not set - store login_token, bool(password) in notebook server-info file - token is passed in the URL as `?token=long-token` - `jupyter notebook list` shows pasteable URLs with token Practical effects: - notebook servers are now authenticated by default - first connect with token sets a cookie - once a user has logged into one server with a token, their browser is logged in to all subsequent servers on the same system+port until cookie_secret changes. - users can no longer type the simple host:port into their browser to connect, until after the first successful login via token(simple URLs are fine if password is enabled). Truly public servers, such as tmpnb, will need to set `NotebookApp.token=''` to fully disable auth. cc Carreau, ellisonbg, rgbkrk, parente	9 years ago
Matthias Bussonnier	38c19214e4	Backport PR #1798: Add base aliases for nbextensions apps ... Includes `--log-level` alias that was missing from install/enable applications	9 years ago
Thomas Kluyver	543d07c21a	Backport PR #1763: Include `@` operator in Codemirror ipython mode ... Implements https://github.com/jupyter/notebook/issues/1689 issuecomment-241050962	9 years ago
Thomas Kluyver	3fbf5bbb5c	Backport PR #1650: Load extension in predictable order. ... Not doing this can lead to subtle incomprehensible issues when 2 extensions (eg, jupyterlab and jupyterlab_extensions) both register the same handlers, that will randomly at each start get a different extension take precedence.	9 years ago
Min RK	4031f8ac5d	Backport PR #1359: Update the session api in preparation for file and console sessions ... Fixes 1358.	9 years ago
Thomas Kluyver	5f6563a0b0	Backport PR #1868: Fix for default value changes in ipython/traitlets/pull/332 ... Closes https://github.com/ipython/traitlets/issues/342 All default values are now cross validated.	9 years ago
Matthias Bussonnier	7dd947f738	Backport PR #1866: Add a `register_mime_type` method to OutputArea ... This method will allow nbextensions to easily register a new mime type and a renderer for that mime type. Usage: ```js var append_json = function (json, md, element) { var type = ‘application/json’; var toinsert = this.create_output_subarea(md, 'output_json rendered_html', type); this.keyboard_manager.register_events(toinsert); ReactDOM.render(React.createElement(JSONTree, {data: json}), toinsert[0]); element.append(toinsert); return toinsert; }; Object.getPrototypeOf(OutputArea).register_mime_type(‘application/json’, append_json, true); ``` See https://github.com/gnestor/notebook_json/tree/render-output for a working implementation using this method. Some considerations: * Should this method not allow the replacement over append functions (e.g. registering a new append function for 'text/markdown' 'text/html')? * We probably needs tests for this...	9 years ago
Matthias Bussonnier	ab07e5d106	Backport PR #1836: Fix: Carriage symbol should behave like in console ... Continuation of https://github.com/jupyter/notebook/pull/1833 This PR makes carriage return symbols behave like in `jupyter console`. It uses [this function](https://github.com/lgeiger/escape-carriage/blob/master/index.js) to escape the carriage return. Here's a example: ``` python print('this sentence\rthat\nwill make you pause') ``` `jupyter notebook` master prints: ``` that will make you pause ``` `jupyter console` prints: ``` that sentence will make you pause ```	9 years ago
Thomas Kluyver	b696033280	Backport PR #1807: set dirty flag when output arrives ... and when the prompt changes we were previously only setting dirty when execution finishes, leaving the notebook incorrectly clean during many changes before the output is complete.	9 years ago
Min RK	833b78d522	Backport PR #1802: Set ws-url data attribute when accessing a notebook terminal ... Notebook is not able to launch a terminal when notebook tries to connect to a web socket url specified via [NotebookApp.websocket_url option](http://jupyter-notebook.readthedocs.io/en/latest/config.html options). The problem occurs when notebook/templates/terminal.html does not set 'data-ws-url' attribute in the body. Two files need to change to fix this: [1] A change needs to be made to notebook/templates/terminal.html [similar to notebook.html](23ca9602c2/notebook/templates/notebook.html L30) to support connecting to a websocket url specified via NotebookApp.websocket_url option when launching a terminal. [2] terminal/js/main.js needs to be updated to consume wsUrl attribute set by terminal.html. If wsUrl is not set, fallback to location.host.	9 years ago
Thomas Kluyver	8b08271d9f	Backport PR #1735: Extend mathjax_url docstring ... Be more specific on how to add a custom MathJax url. Related to https://github.com/jupyter/notebook/issues/1721	9 years ago
samarsultan	fc8dd8acba	Adding GUI Mirroring	9 years ago
samarsultan	fe845e85c4	Adding GUI Mirroring	9 years ago
samarsultan	0a054df334	Adding GUI Mirroring	9 years ago
samarsultan	40b1af189d	Merge branch '4.x' of https://github.com/samarsultan/notebook into 4.x	9 years ago
samarsultan	fff954afb7	Adding Gui Mirroring	9 years ago
Min RK	c89fed4d24	Backport PR #1727: fix outdated links to ipython-doc ... closes #1726	9 years ago