[IPython-dev] Loading nbextension on widget instantiation

Thomas Kluyver takowl at gmail.com
Mon Jun 23 17:05:50 EDT 2014


On 23 June 2014 13:23, Brian Granger <ellisonbg at gmail.com> wrote:

> I think we need to talk about the security aspects of this. Adding to
> our dev meeting agenda for the week.
>

In discussions with people, we've said that widgets should simply be
treated as unsafe output, the same way as any other HTML/JS output. So if
you load an untrusted notebook, you won't see widgets until you run it. Do
you think there are more subtleties?

Thomas
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.python.org/pipermail/ipython-dev/attachments/20140623/f7821efb/attachment.html>


More information about the IPython-dev mailing list