Securing a notebook
Securing a notebook can be accomplished by several methods such as:
- Manage authorization
- Securing notebook content
Managing notebook authorization
A notebook can be secured to use username/password authorization. Authorization is on by default in your notebook. Under Jupyter it is token/password instead of username/password as a token is more open to interpretation. See Jupyter documentation on implementing authorization as this has changed slightly over time.
Securing notebook content
A notebook has possible security issues with several parts of standard content that are secured automatically by Jupyter:
- Untrusted HTML is sanitized
- Untrusted JavaScript is not executed
- HTML and JavaScript in markdown cells is not trusted
- Notebook output is not trusted
- Other HTML or JavaScript in the notebook is not trusted
Where trust comes down to the question: Did the user do this or did the Jupyter script? Untrusted means it will not be generated.
Sanitized code is wrapped to force the values to...
