upstream/ipython Files · IPython/html/services/security/handlers.py

Handle kernel messages synchronously...

Handle kernel messages synchronously A problem can happen when two messages come in for different comms, where the second depends on the first (for example, the first might be a message setting the state of a widget, and the second triggering a view creation for the widget). Since comm message queues are independent of each other, the second message could be executed before the first message. This exposes a more fundamental assumption users are likely to have that messages from python are processed synchronously. Thanks to @dmadeka for reporting an error that led to discovering this issue.

Kyle Kelley - - Load All Authors

File last commit:

r19156:d3e620f5


                r20621:f936f880

Download file

             handlers.py
        
                    23 lines
            
             | 715 B
            
                | text/x-python
            
             |
                PythonLexer
            
             / IPython / html / services / security / handlers.py
          
                    History
                
                 |
                  Annotation
                 | Raw
                 |Copy content
                 |Copy permalink

      """Tornado handlers for security logging."""

      # Copyright (c) IPython Development Team.

      # Distributed under the terms of the Modified BSD License.

      from tornado import gen, web

      from ...base.handlers import IPythonHandler, json_errors

      from . import csp_report_uri

      class CSPReportHandler(IPythonHandler):

          '''Accepts a content security policy violation report'''

          @web.authenticated

          @json_errors

          def post(self):

              '''Log a content security policy violation report'''

              csp_report = self.get_json_body()

              self.log.warn("Content security violation: %s",

                            self.request.body.decode('utf8', 'replace'))

      default_handlers = [

          (csp_report_uri, CSPReportHandler)

      ]

	Site-wide shortcuts
/	Use quick search box
g h	Goto home page
g g	Goto my private gists page
g G	Goto my public gists page
g 0-9	Goto bookmarked items from 0-9
n r	New repository page
n g	New gist page

	Repositories
g s	Goto summary page
g c	Goto changelog page
g f	Goto files page
g F	Goto files page with file search activated
g p	Goto pull requests page
g o	Goto repository settings
g O	Goto repository access permissions settings
t s	Toggle sidebar on some pages

				"""Tornado handlers for security logging."""

				# Copyright (c) IPython Development Team.
				# Distributed under the terms of the Modified BSD License.

				from tornado import gen, web

				from ...base.handlers import IPythonHandler, json_errors
				from . import csp_report_uri

				class CSPReportHandler(IPythonHandler):
				'''Accepts a content security policy violation report'''
				@web.authenticated
				@json_errors
				def post(self):
				'''Log a content security policy violation report'''
				csp_report = self.get_json_body()
				self.log.warn("Content security violation: %s",
				self.request.body.decode('utf8', 'replace'))

				default_handlers = [
				(csp_report_uri, CSPReportHandler)
				]