restrict to NASA organization

nasa · Aug 21, 2024 · 6ceafa9 · 6ceafa9
1 parent 59047d8
commit 6ceafa9
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/packages/notebook-viewer/app.py b/packages/notebook-viewer/app.py
@@ -34,6 +34,10 @@ def convertNotebookToHtml():
 
     # if we're including a github.com URL, we'll provide some additional links to the original github repo
     if notebookUrl.startswith('https://github.com'):
+        # make sure we are only rendering notebooks from the nasa organization
+        if not notebookUrl.startswith('https://github.com/nasa/'):
+            return "Invalid notebook URL, must be in the NASA organization", 400
+
         githubUrl = notebookUrl
         notebookUrl = notebookUrl.replace(
             "https://github.com", "https://raw.githubusercontent.com").replace("/blob/", "/")