MinRK 3588fe40a9 Merge Security Pull Request: google-caja ... Adds HTML sanitization. The basics: - untrusted HTML is always sanitized, with no warning (there is console logging for changes made) - markdown is always treated as untrusted - no warnings for simply excluded output (e.g. Javascript) - CSS tags and attributes are always stripped from untrusted HTML - never check whether HTML is "safe," only sanitize - add 'Trust notebook' to File menu		2014-03-04 17:35:55 -08:00
..
tests	cleanup test_nbmanager	2014-03-03 16:10:20 -08:00
filenbmanager.py	Merge Security Pull Request: google-caja	2014-03-04 17:35:55 -08:00
handlers.py	trust via mark cells and save, rather than trust API request	2014-03-03 16:10:21 -08:00
nbmanager.py	trust method docstrings	2014-03-03 16:27:59 -08:00