Connor Burns

Your first point makes a lot of sense! Not only would explicitly defining which variables users can change via the API (in production/deployment settings) enhance notebook protection, but it would...

@lungben It's definitely overkill to have to import all of Pluto, so putting it in a separate package that main Pluto would import inside `PlutoRunner` might work better. Perhaps the...

The client functionality is now in a separate package https://github.com/JuliaPluto/PlutoRESTClient.jl. I haven't published it nor removed the client code from the PR yet though

You're correct, browsers generally don't permit notifications from insecure contexts ([see this MDN page](https://developer.mozilla.org/en-US/docs/Web/API/notification)). Pluto doesn't support HTTPS hosting by itself since there are better tools to do this anyways....

I looked into this issue a bit and found this snippet of responsible inside the CM6 [autocomplete extension](https://github.com/codemirror/autocomplete/blob/168d7be2ccdacefe7ad57a85fcc49f2b7c45fede/src/tooltip.ts#L229-L236): ```javascript if (pos) { this.info.style.top = pos.top this.info.style.bottom = pos.bottom this.info.style.maxWidth =...

Closing this in favor of https://github.com/JuliaPluto/docker-compose-slider-server! That repo includes docker compose configurations for a best-practices slider server deployment (slider server + reverse proxy + SSL/TLS)