mirror/notebook
2
0
Fork 0
mirror of https://github.com/jupyter/notebook.git synced 2024-12-21 04:10:17 +08:00
Code Issues Packages Projects Releases Wiki Activity
7,853 Commits 16 Branches 997 Tags 77 MiB
Jupyter Notebook 75.8%
TypeScript 17.5%
Python 2.3%
JavaScript 1.9%
CSS 1.7%
Other 0.8%
35f32dd2da
Go to file
Matthias Bussonnier 35f32dd2da Fix XSS reported on Security list 
No CVE-ID yet

August 18, 2015
-----
Reported to Quantopian by Juan Broullón <thebrowfc@gmail.com>...

If you create a new folder in the iPython file browser and set
Javascript code as its name the code injected will be executed. So, if I
create a folder called "><img src=x onerror=alert(document.cookie)> and
then I access to it, the cookies will be prompted.

The XSS code is also executed if you access a link pointing directly at
the folder.

  jik
------
2015-09-01 16:39:01 +02:00
docs Document pre/post save hooks 2015-08-24 11:43:04 -07:00
git-hooks Git hooks need to use invoke, not fab 2014-12-10 10:35:00 -08:00
notebook Fix XSS reported on Security list 2015-09-01 16:39:01 +02:00
scripts install-nbextension -> nbextension install 2015-06-26 14:28:32 -07:00
tools start workign on typeahead 2015-08-10 17:35:45 -07:00
.bowerrc s/jupyter_notebook/notebook 2015-05-14 10:49:28 -07:00
.gitignore Revert "Use NPM, node ES5, and browserify." 2015-08-27 09:00:15 +02:00
.gitmodules remove submodule 2015-04-21 15:37:09 -07:00
.mailmap fix backward n_pulls, n_issues in github stats 2015-04-03 13:05:18 -07:00
.travis.yml Only build once, via npm postinstall 2015-08-26 14:06:14 -07:00
bower.json Revert "Use NPM, node ES5, and browserify." 2015-08-27 09:00:15 +02:00
CONTRIBUTING.md package skeleton 2015-04-21 15:37:06 -07:00
COPYING.md package skeleton 2015-04-21 15:37:06 -07:00
Dockerfile remove requirements.txt 2015-07-23 09:31:19 -07:00
MANIFEST.in Add missing files to manifest 2015-07-27 14:54:38 -07:00
package.json Revert "Use NPM, node ES5, and browserify." 2015-08-27 09:00:15 +02:00
README.md Revert "Use NPM, node ES5, and browserify." 2015-08-27 09:00:15 +02:00
setup.cfg package skeleton 2015-04-21 15:37:06 -07:00
setup.py Revert "Use NPM, node ES5, and browserify." 2015-08-27 09:00:15 +02:00
setupbase.py Revert "Use NPM, node ES5, and browserify." 2015-08-27 09:00:15 +02:00

README.md

Jupyter Notebook

The Jupyter HTML notebook is a web-based notebook environment for interactive computing.

Dev quickstart:

  • ensure that you have node/npm installed (e.g. brew install node on OS X)
  • Clone this repo and cd into it
  • pip install --pre -e .

NOTE: For Debian/Ubuntu systems, if you're installing the system node you need to use the 'nodejs-legacy' package and not the 'node' package.

Launch with:

jupyter notebook

Example installation (tested on Ubuntu Trusty):

sudo apt-get install nodejs-legacy npm python-virtualenv python-dev
# ensure setuptools/pip are up-to-date
pip install --upgrade setuptools pip
git clone https://github.com/jupyter/notebook.git
cd notebook
pip install --pre -e .
jupyter notebook