You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Kyle Kelley ab791441b2 Backport PR #1938: don't check origin on token-authenticated requests ... adds LoginHandler.should_check_origin classmethod API While testing, I noticed that we were checking origin and authentication on CSP violation reports, but browsers are sending CSP reports with no Origin, meaning that no CSP report will ever be accepted. That doesn't make sense to me, so I disabled both - a CSP report can now be made from *anywhere* (no auth, no check). rgbkrk does that sound right to you? Or should it be authenticated but no origin check? Signed-off-by: Min RK <benjaminrk@gmail.com>		9 years ago
..
api	Backport PR #1359: Update the session api in preparation for file and console sessions	9 years ago
config	Backport PR #1904: json_errors should be outermost decorator on API handlers	9 years ago
contents	Backport PR #1871: Allow None for post_save_hook	9 years ago
kernels	Backport PR #1904: json_errors should be outermost decorator on API handlers	9 years ago
kernelspecs	Backport PR #1919: remove leftover print statement	9 years ago
nbconvert	Backport PR #1904: json_errors should be outermost decorator on API handlers	9 years ago
security	Backport PR #1938: don't check origin on token-authenticated requests	9 years ago
sessions	Backport PR #1904: json_errors should be outermost decorator on API handlers	9 years ago
__init__.py	s/jupyter_notebook/notebook	11 years ago