##// END OF EJS Templates
upstream » ipython
RSS

Clone from https://github.com/ipython/ipython.git

Fix XSS reported on Security list...
Fix XSS reported on Security list No CVE-ID yet August 18, 2015 ----- Reported to Quantopian by Juan Broullón <thebrowfc@gmail.com>... If you create a new folder in the iPython file browser and set Javascript code as its name the code injected will be executed. So, if I create a folder called "><img src=x onerror=alert(document.cookie)> and then I access to it, the cookies will be prompted. The XSS code is also executed if you access a link pointing directly at the folder. jik ------
Fernando Perez - - Load All Authors

File last commit:

r5731:a1ccd554
r21633:3ab41641
Show More
testupload
22 lines | 618 B | text/plain | TextLexer
/ tools / testupload
History | Annotation | Raw |Copy content |Copy permalink
#!/usr/bin/env python
"""Simple upload script to push up into the testing directory a local build
"""
from __future__ import print_function
from toollib import *
# Get main ipython dir, this will raise if it doesn't pass some checks
ipdir = get_ipdir()
distdir = pjoin(ipdir, 'dist')
# Load release info
execfile(pjoin(ipdir, 'IPython','core','release.py'))
# Build site addresses for file uploads
testing_site = '%s/testing/%s' % (archive, version)
cd(distdir)
# Create remote path if it doesn't exist.
sh('ssh %s "mkdir -p %s/testing/%s" ' % (archive_user, archive_dir, version))
sh('scp * %s' % testing_site)