Commit Graph

7857 Commits

Author SHA1 Message Date
Min RK
f9885818e2 Merge pull request #372 from Carreau/no-profile
remove leftover of profiles
2015-09-01 18:15:37 +02:00
Brian E. Granger
1ecce4aa35 Merge pull request #373 from Carreau/update-logo
Remove unused logo
2015-09-01 08:12:07 -07:00
Matthias Bussonnier
35f32dd2da Fix XSS reported on Security list
No CVE-ID yet

August 18, 2015
-----
Reported to Quantopian by Juan Broullón <thebrowfc@gmail.com>...

If you create a new folder in the iPython file browser and set
Javascript code as its name the code injected will be executed. So, if I
create a folder called "><img src=x onerror=alert(document.cookie)> and
then I access to it, the cookies will be prompted.

The XSS code is also executed if you access a link pointing directly at
the folder.

  jik
------
2015-09-01 16:39:01 +02:00
Matthias Bussonnier
06da70c536 Remove unused logo 2015-09-01 14:28:59 +02:00
Matthias Bussonnier
2f44f3ff09 remove leftover of profiles 2015-09-01 10:57:52 +02:00
Matthias Bussonnier
474a3bb04e Merge pull request #360 from minrk/dispatch-halt-init
don't complete initialization if dispatching to subcommand/non-launch action
2015-08-31 14:14:13 +02:00
Kyle Kelley
5556beee70 Merge pull request #364 from jupyter/revert-268-npm
Revert "Use NPM, node ES5, and browserify."
2015-08-30 14:20:43 -05:00
Min RK
74b1c875d3 don't complete initialization if dispatching to subcommand/non-launch action
avoids registering shutdown signal handler during generate-config
2015-08-28 08:08:42 -07:00
Matthias Bussonnier
2d5d548d79 Revert "Use NPM, node ES5, and browserify." 2015-08-27 09:00:15 +02:00
Kyle Kelley
62101281e0 Merge pull request #268 from jdfreder/npm
Use NPM, node ES5, and browserify.
2015-08-26 16:45:09 -05:00
Jonathan Frederic
8ca1e85b85 commonjs-ify searchandreplace 2015-08-26 14:14:26 -07:00
Jonathan Frederic
511bb689c2 Move search and replace into the right directory 2015-08-26 14:11:35 -07:00
Steven Silvester
307d9ee49c Include components in setup base 2015-08-26 14:11:27 -07:00
Jonathan Frederic
7717a986d1 Load underscore globally 2015-08-26 14:06:14 -07:00
Jonathan Frederic
03a5b47067 Assume undefined is idle. 2015-08-26 14:06:14 -07:00
Jonathan Frederic
b689700910 Only build once, via npm postinstall 2015-08-26 14:06:14 -07:00
Jonathan Frederic
3bc3fda744 Travis you old fart, get modern with a phantomjs from this century 💩 2015-08-26 14:06:14 -07:00
Jonathan Frederic
7f4101709b Don't use bind 2015-08-26 14:06:14 -07:00
Jonathan Frederic
467ae32b05 Make sure requirejs can't be set more than once. 2015-08-26 14:06:13 -07:00
Jonathan Frederic
8c8c95ceca Load CodeMirror once globally 2015-08-26 14:06:13 -07:00
Jonathan Frederic
84ce0cee2c Address @rgbkrk 's comments 2015-08-26 14:06:13 -07:00
Jonathan Frederic
c802038415 Remove jquery, jqueryui, and bootstrap from npm packages 2015-08-26 14:06:13 -07:00
Jonathan Frederic
69bb4b1a0a Truely load jquery, jqueryui, and bootstrap as globals. 2015-08-26 14:06:13 -07:00
Jonathan Frederic
a9610dc413 Assume idle if late loaded. 2015-08-26 14:06:13 -07:00
Jonathan Frederic
0bc24c5f3f Remove logs 2015-08-26 14:06:13 -07:00
Jonathan Frederic
b0cd502d8d Add detail to nbextension test. 2015-08-26 14:06:13 -07:00
Jonathan Frederic
b0ec31d98d Fix Caja 2015-08-26 14:06:13 -07:00
Jonathan Frederic
84c9cb736f Move version line into contruction block 2015-08-26 14:06:12 -07:00
Jonathan Frederic
e44d91229e Let kyle work on things 2015-08-26 14:06:12 -07:00
Jonathan Frederic
55dd626980 Fix tests 2015-08-26 14:06:12 -07:00
Jonathan Frederic
7df0a118c7 Make caja point to the same file 2015-08-26 14:06:12 -07:00
Jonathan Frederic
541aed3ea1 Add defferred loading of jquery in terminal 2015-08-26 14:06:12 -07:00
Jonathan Frederic
0a1854a14f Fix remaining problems in namespace 2015-08-26 14:06:12 -07:00
Jonathan Frederic
0650a197b6 Fix Toolbar reference 2015-08-26 14:06:12 -07:00
Jonathan Frederic
9fe3f63269 Fix global flag of jprop function in namespace 2015-08-26 14:06:12 -07:00
Jonathan Frederic
f2993811b1 Make sure destination exists 2015-08-26 14:06:12 -07:00
Jonathan Frederic
89f8dfa8be Use npm to include legacy namespace components. 2015-08-26 14:06:12 -07:00
Jonathan Frederic
81e0fb3194 Change global namespace logic to placehold with null 2015-08-26 14:06:12 -07:00
Jonathan Frederic
b8f25eea2f Remove debowerify 2015-08-26 14:06:12 -07:00
Jonathan Frederic
72d052eb5d Debowerify and google caja support 2015-08-26 14:06:12 -07:00
Jonathan Frederic
b2bf69f6d7 fix jsversion command 2015-08-26 14:06:11 -07:00
Jonathan Frederic
2bb09578eb Don't try loading cluster stuff in namespace.
It should be done in ipyparallel instead!
2015-08-26 14:06:11 -07:00
Jonathan Frederic
c0a30d4df8 Commandpalette 2015-08-26 14:06:11 -07:00
Jonathan Frederic
aa097ba662 Add typeahead npm ref 2015-08-26 14:06:11 -07:00
jdfreder
b2ae17dd09 Fix some problems reported by Matthias 2015-08-26 14:06:11 -07:00
Jonathan Frederic
6258f542dd Almost working 100% 2015-08-26 14:06:11 -07:00
Jonathan Frederic
a719e19b39 Add script to amd-ify the commonjs code,
(backwards compat. and dynamic loading)
2015-08-26 14:06:11 -07:00
Jonathan Frederic
4c07a8bffc Add new cjs conversion method 2015-08-26 14:06:11 -07:00
Jonathan Frederic
c8ff593efc Move source out 2015-08-26 14:06:11 -07:00
Jonathan Frederic
e0f3141748 Magic r.js stuff 2015-08-26 14:06:10 -07:00