jupyter / jupyter/notebook

Non-http URL schemes in Markdown cells

Open
#189 5 comments 0 reactions 0 assignees View on GitHub
status:Needs Discussion tag:Security
Dominant language
Jupyter Notebook
Stars
13.3k
Forks
5.8k
Avg merge
6d 11h
Merged PRs (30d)
7

Description

I use URLs like these to link to scientific papers in my Papers2 library:
`papers2://publication/citekey/Polsky:2004jc`

In the notebook, the following results in a clickable URL:

```
%%HTML
Polsky:2014jc
```

But in a Markdown cell, this doesn't work (link is underlined but nothing happens when clicked):

```
[Polsky:2004jc](papers2://publication/citekey/Polsky:2004jc)
```

Indeed the page source shows it was rendered as `Polsky:2004jc`. Changing the scheme to http causes a href attribute to appear (not fit for the original purpose obviously).

I tested it in the current version of `marked` and the link renders properly. Is that a security setting? The notebook is trusted.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.