Kernel specs REST API

The [REST API for kernel specs](https://github.com/ipython/ipython/wiki/IPEP-25:-Registry-of-installed-kernels#rest-api) is described in IPEP 25.
Agreed, both should be fixed.
Nbext can give a hint on potential flawed extension to inject code. And kernel spec tells you that some program are eventually installed on the target machine. Both even if not dangerous by themselves might be sensitive informations.

Envoyé de mon iPhone

> Le 16 juin 2014 à 01:56, Thomas Kluyver <notifications@github.com> a écrit :
> 
> In IPython/html/kernelspecs/handlers.py:
> 
> > @@ -0,0 +1,25 @@
> > +from tornado import web
> > +from ..base.handlers import IPythonHandler
> > +from ..services.kernelspecs.handlers import kernel_name_regex
> > +
> > +class KernelSpecResourceHandler(web.StaticFileHandler, IPythonHandler):
> It looks like FileFindHandler, which we use for nbextensions, isn't authenticated either. Possibly we should fix them both. I don't think anything in kernel spec directories is likely to be private, though.
> 
> As to metaclasses: I'd say that's a step too much magic. I think having to explicitly mark handlers as authenticated is probably a good thing.
> 
> —
> Reply to this email directly or view it on GitHub.