[IPython-dev] nbviewer with private repos

[Matthias BUSSONNIER]

Le 14 oct. 2013 à 18:36, Bartosz a écrit :

> Hi all,
> 
> Is there any work in progress on using nbviewer with private repos (GH
> and bitbucket)? The FAQ mentions that it's being worked on, but I did
> not find anything in the issues/PRs on Github.

With the current way nbviewer work this would automatically make your repo accessible to anyone. 
Private repo would need us to build an authentication mechanism with all the complication that goes with that. 
and more especially : 

1) Legal responsibility
2) Security Cost , like SSL endpoint  (that actually cost  $) which by itself would actually double the cost of nbviewer. 
3) Nbviewer is a golden goose for js injection/XSS and authentified user once we add authentication, if we don't pay attention.

Good news is :

You can install nbviewer locally, and give it access you your repo, it will also work for any public stuff. (plus a little line host and Tada). Still carefull of JS injection/XSS.

We are currently  moving to Rackspace.
It is slightly more work as we need to build the stack and (review the architecture on nbviewer to use tornado, help welcomed).
But might allow some more flexibility. 

-- 
M





> 
> BTW Bitbucket offers unlimited free private repositories for academia,
> so eiht nbviewer it might become great collaboration tool.
> 
> Cheers,
> 
> Bartosz
> _______________________________________________
> IPython-dev mailing list
> IPython-dev at scipy.org
> http://mail.scipy.org/mailman/listinfo/ipython-dev