dashboards_server icon indicating copy to clipboard operation
dashboards_server copied to clipboard

Prevent re-running of code cells

Open parente opened this issue 9 years ago • 0 comments

Current implementation prevents arbitrary code from the browser to reach the kernel. However, the browser can instruct the proxy to resend one of the code cells from a notebook multiple times. A bad actor might take advantage of this to mess with state on the backend if the notebook code is not written to account for multiple runs (e.g., incrementing a counter too many times).

Still, this is not a serious bug: the code already has to run once on the first load of the dashboard.

parente avatar Jan 18 '16 02:01 parente