##// END OF EJS Templates
upstream » ipython
RSS

Clone from https://github.com/ipython/ipython.git

Fix XSS reported on Security list...
Fix XSS reported on Security list No CVE-ID yet August 18, 2015 ----- Reported to Quantopian by Juan Broullón <thebrowfc@gmail.com>... If you create a new folder in the iPython file browser and set Javascript code as its name the code injected will be executed. So, if I create a folder called "><img src=x onerror=alert(document.cookie)> and then I access to it, the cookies will be prompted. The XSS code is also executed if you access a link pointing directly at the folder. jik ------
Thomas Kluyver - - Load All Authors

File last commit:

r19535:f71eeacc
r21633:3ab41641
Show More
MANIFEST.in
38 lines | 765 B | text/plain | TextLexer
/ MANIFEST.in
History | Annotation | Raw |Copy content |Copy permalink
include README.rst
include COPYING.rst
include setupbase.py
include setupegg.py
graft setupext
graft scripts
# Load main dir but exclude things we don't want in the distro
graft IPython
prune IPython/html/static/mathjax
# Include some specific files and data resources we need
include IPython/.git_commit_info.ini
include IPython/qt/console/resources/icon/IPythonConsole.svg
# Documentation
graft docs
exclude docs/\#*
exclude docs/man/*.1.gz
# Examples
graft examples
# docs subdirs we want to skip
prune docs/build
prune docs/gh-pages
prune docs/dist
# Patterns to exclude from any directory
global-exclude *~
global-exclude *.flc
global-exclude *.pyc
global-exclude *.pyo
global-exclude .dircopy.log
global-exclude .git
global-exclude .ipynb_checkpoints