58 Commits (efdbef117f17ecdf1b8bbae00aabdcef141d6f02)

Author	SHA1	Message	Date
Min RK	8abc6dff77	enable tornado xsrf cookie	9 years ago
Min RK	8e3cc4eab4	traitlets api backport ... 4.x doesn't use traitlets 4.2 API	9 years ago
Grant Nestor	8b77f0002e	Backport PR #1994: Further highlight token info in log output	9 years ago
Thomas Kluyver	ad5c1a2c2e	Backport PR #1972: better docs for token auth ... - clearer description of defaults in help output for token - show how to get the token on the login page - add details about token auth to the security doc closes 1944 Signed-off-by: Min RK <benjaminrk@gmail.com>	9 years ago
Thomas Kluyver	5fdc14df42	Backport PR #1887: Fix bug when attempting to remove old nbserver info files ... When list_running_servers find an old nbserver-xxxx.json info file, it attempts to delete it. It needs to use the full path rather than the filename. An exception was being raised, but the error was suppressed silently. This fixes issue 1886	9 years ago
Kyle Kelley	754f397e9e	Backport PR #1831: enable token-authentication by default ... - add `NotebookApp.login_token`, used when `NotebookApp.password` is not set - store login_token, bool(password) in notebook server-info file - token is passed in the URL as `?token=long-token` - `jupyter notebook list` shows pasteable URLs with token Practical effects: - notebook servers are now authenticated by default - first connect with token sets a cookie - once a user has logged into one server with a token, their browser is logged in to all subsequent servers on the same system+port until cookie_secret changes. - users can no longer type the simple host:port into their browser to connect, until after the first successful login via token(simple URLs are fine if password is enabled). Truly public servers, such as tmpnb, will need to set `NotebookApp.token=''` to fully disable auth. cc Carreau, ellisonbg, rgbkrk, parente	9 years ago
Thomas Kluyver	3fbf5bbb5c	Backport PR #1650: Load extension in predictable order. ... Not doing this can lead to subtle incomprehensible issues when 2 extensions (eg, jupyterlab and jupyterlab_extensions) both register the same handlers, that will randomly at each start get a different extension take precedence.	9 years ago
Thomas Kluyver	8b08271d9f	Backport PR #1735: Extend mathjax_url docstring ... Be more specific on how to add a custom MathJax url. Related to https://github.com/jupyter/notebook/issues/1721	9 years ago
Min RK	60293ebac4	Backport PR #1665: Typo hunting: notebookapp.py ... Typo hunting	9 years ago
Matthias Bussonnier	69db442305	Backport PR #1552: avoid clobbering ssl_options.ssl_version ... use setdefault instead of setting directly, so that the user can override these values. closes #1028	10 years ago
Min RK	3d39c92b57	Backport PR #1360: Override mimetype for .css files ... This should avoid the issue several people have had with unstyled pages on misconfigured Windows systems. I think practicality beats purity here. Closes gh-1350	10 years ago
Sylvain Corlay	7330bd491a	Fix widget warning in case of ipywidgets 5.x	10 years ago
Min RK	ea4a0c7ccc	Backport PR #1338: avoid double-base-url when launching browser ... default_url contains base_url, and so does connection_url closes #1336	10 years ago
Min RK	d542745a68	Backport pull request #1279: Downgraded ipywidget hack ... PR #1279 didn't auto-apply cleanly, so I had to do a manual backport.	10 years ago
Min RK	8151f2f35c	Backport PR #879: New nbextensions installation API	10 years ago
Min RK	6a20fb3bb6	Backport PR #1079: remove the 'random' from the random-port message ... it's not really a random port, it's usually n+1	10 years ago
Min RK	4f7825fe92	Backport PR #1231: Add `cookie_options` to make cookie args configurable ... also make cookies httponly by default, since we do not need or want access to cookies in js	10 years ago
Min RK	b3c97cd6a6	Backport PR #1168: allow notebook-dir to be root ... we were stripping `/`, which is fine except when that's the whole string, which we were then interpreting as `''`, which gives the CWD. This is a regression in 4.1 (#411)	10 years ago
Min RK	e4f5d040d1	Backport PR #931: Add simple iopub message rate limiter ... This is designed to alleviate notebook crashes due to an excess of messages passed to the frontend. This is a small part of a solution to the bigger problem. I mainly opened this PR to help students in @ellisonbg 's class this quarter avoid crashing their notebooks and losing data.	10 years ago
Min RK	67e60d954f	Backport PR #1020: only import ssl if it's used ... SSL stdlib module may be unavailable in rare cases. closes #1019	10 years ago
Volker Braun	0f0cbc20c5	Use default_url instead of hardcoding /tree for initial url	10 years ago
Min RK	970507711b	restore hardcoded config_dir	10 years ago
damianavila	d0c5c393b6	Remove hard-coding of jupyter_config_dir config_dir at the notebookapp level, letting that being managed ny the ConfigManager.	10 years ago
Sylvain Corlay	2cb85ab939	fix deprecation warning	10 years ago
Colin Jermain	5768fc7c11	BUG: use url_escape to encode URL for browser	10 years ago
Jeroen Demeyer	17b3643891	Interpret mathjax_url relative to base_url	10 years ago
Adam Brewster	1634910aed	SSL Client Authentication	10 years ago
Safia Abdalla	84f1f6fc3d	Replace backslash with slash	11 years ago
Safia Abdalla	36d5131a4b	Added notebook_dir validations to _validate function	11 years ago
Safia Abdalla	9969cce177	Added rstrip on notebook_dir to resolve #411	11 years ago
Min RK	5e6339180e	remove unconditional IPython import from notebookapp ... IPython shouldn't ever be assumed to be present	11 years ago
Min RK	f9885818e2	Merge pull request #372 from Carreau/no-profile ... remove leftover of profiles	11 years ago
Matthias Bussonnier	35f32dd2da	Fix XSS reported on Security list ... No CVE-ID yet August 18, 2015 ----- Reported to Quantopian by Juan Broullón <thebrowfc@gmail.com>... If you create a new folder in the iPython file browser and set Javascript code as its name the code injected will be executed. So, if I create a folder called "><img src=x onerror=alert(document.cookie)> and then I access to it, the cookies will be prompted. The XSS code is also executed if you access a link pointing directly at the folder. jik ------	11 years ago
Matthias Bussonnier	2f44f3ff09	remove leftover of profiles	11 years ago
Min RK	74b1c875d3	don't complete initialization if dispatching to subcommand/non-launch action ... avoids registering shutdown signal handler during generate-config	11 years ago
Min RK	e122f061d8	Merge pull request #296 from Carreau/simpledev ... Add option to not use minified javascript and ease development.	11 years ago
Matthias Bussonnier	f9ad56e206	Add option to not use minified javascript and ease developpement.	11 years ago
Thomas Kluyver	2ad0e9f569	Remove outdated --profile example	11 years ago
Thomas Kluyver	a83dd56d0f	Remove some references to IPython in notebookapp ... There were a few help strings and printed output that hadn't been updated since the big split.	11 years ago
Thomas Kluyver	3a9493bcab	Look for notebook config in nbconfig/ subdirectory ... Fixes gh-250, I hope	11 years ago
Thomas Kluyver	7e4354fbd9	Put config_dir in resources in nbconvert handlers ... CSSHTMLHeaderPreprocessor uses this to include the user's custom.css in HTML output. Closes gh-185	11 years ago
Thomas Kluyver	5ad3fd19f6	Don't install native kernelspec on startup ... Part of the fix for jupyter/jupyter_client#35; other part coming up soon	11 years ago
Min RK	b0cae1f51b	Merge pull request #214 from jasongrout/trait-instances ... Use instances of traits instead of trait classes	11 years ago
Min RK	c0f3b0abed	Merge pull request #120 from jdfreder/widgets ... Hardcode widgets	11 years ago
Jonathan Frederic	fddd29f63a	Use app_log	11 years ago
Thomas Kluyver	a425ed30ef	Env variables for server root & URL in terminals ... This came up on reddit: if you want to open a notebook or a file in the text editor from the terminal inside the notebook web interface, you can construct a URL to open. But to do that accurately, you need to know the root directory where the server is looking, and the first part of the URL. This exposes both of those as environment variables: $JUPYTER_SERVER_ROOT and $JUPYTER_SERVER_URL.	11 years ago
Jason Grout	cf69ab7428	Use instances of traits instead of trait classes	11 years ago
Min RK	71c2387e34	Merge pull request #173 from jasongrout/swagger ... Rough draft of documentation for the notebook REST API for kernels, kernel specs, and sessions	11 years ago
Min RK	b9ffd1428e	include version in --version output	11 years ago
Min RK	b122b52dc5	handle _template_path being unicode on py2 ... check string_types instead of str	11 years ago