upstream/ipython Files · IPython/html/tests/notebook/inject_js.js

Add about dialog in Notebook Help Menu....

Add about dialog in Notebook Help Menu. This allow to get info on version of IPython when running remotely. The about dialog also send a kernel info request and display the banner which is useful for non-python kernel that don't match IPython version

Jonathan Frederic - - Load All Authors

File last commit:

r15201:029ac024


                r18359:7fd73a83

Download file

             inject_js.js
        
                    23 lines
            
             | 648 B
            
                | application/javascript
            
             |
                JavascriptLexer
            
             / IPython / html / tests / notebook / inject_js.js
          
                    History
                
                 |
                  Annotation
                 | Raw
                 |Copy content
                 |Copy permalink

      //

      // Test robustness about JS injection in different place

      //

      // This assume malicious document arrive to the frontend.

      //

      casper.notebook_test(function () {

          var messages = [];

          this.on('remote.alert', function (msg) {

              messages.push(msg);

          });

          this.evaluate(function () {

              var cell = IPython.notebook.get_cell(0);

              var json = cell.toJSON();

              json.prompt_number = "<script> alert('hello from input prompts !')</script>";

              cell.fromJSON(json);

          });

          this.then(function () {

              this.test.assert(messages.length == 0, "Captured log message from script tag injection !");

          });

      });

	Site-wide shortcuts
/	Use quick search box
g h	Goto home page
g g	Goto my private gists page
g G	Goto my public gists page
g 0-9	Goto bookmarked items from 0-9
n r	New repository page
n g	New gist page

	Repositories
g s	Goto summary page
g c	Goto changelog page
g f	Goto files page
g F	Goto files page with file search activated
g p	Goto pull requests page
g o	Goto repository settings
g O	Goto repository access permissions settings
t s	Toggle sidebar on some pages

				//
				// Test robustness about JS injection in different place
				//
				// This assume malicious document arrive to the frontend.
				//

				casper.notebook_test(function () {
				var messages = [];
				this.on('remote.alert', function (msg) {
				messages.push(msg);
				});

				this.evaluate(function () {
				var cell = IPython.notebook.get_cell(0);
				var json = cell.toJSON();
				json.prompt_number = "<script> alert('hello from input prompts !')</script>";
				cell.fromJSON(json);
				});

				this.then(function () {
				this.test.assert(messages.length == 0, "Captured log message from script tag injection !");
				});
				});