No REFERER check when opening a console ou jupyterlab from a notebook

parmentelat / nbhosting

nginx + django + docker architecture to host notebooks embedded from open-edx hosted MOOCs

Other

77 stars 8 forks source link

No REFERER check when opening a console ou jupyterlab from a notebook #159

Open lsignac opened 7 months ago

lsignac commented 7 months ago

Command palette allows users to open a new Python console or a new Jupyterlab window. This new window is openend in a new tab (even if the notebook is accessed as an iframe). The new window URL (https://nbhosting.inria.fr/nnnnn/consoles/console-1-XXXX for a console window) can be accessed with another browser instance or from another IP without any REFERER check.