From f06633e6253cefba35449b4aad1cf828b0ebff17 Mon Sep 17 00:00:00 2001 From: Andrew Schwartzmeyer Date: Tue, 15 Jun 2021 15:23:58 -0700 Subject: [PATCH] Explicitly disable extension for untrusted workspaces This extension can read and execute code from a workspace folder, therefore it is a potential security risk to run the extension in an untrusted workspace. Until we can put more effort into partial support of safe features, we will explicitly disable this extension when the workspace is untrusted. --- package.json | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/package.json b/package.json index a23597d8d3..d518cb378d 100644 --- a/package.json +++ b/package.json @@ -895,6 +895,11 @@ } } }, + "capabilities": { + "untrustedWorkspaces": { + "supported": false + } + }, "configurationDefaults": { "[powershell]": { "debug.saveBeforeStart": "nonUntitledEditorsInActiveGroup",