Unnamed repository; edit this file 'description' to name the repository.
Auto merge of #14112 - Veykril:vscode-untrusted, r=lnicola
minor: Explicitly disable the rust-analyzer extension in untrusted workspaces
This is the default, but its always better to be explicit here + we can add a small note as to why.
| -rw-r--r-- | editors/code/package.json | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/editors/code/package.json b/editors/code/package.json index 9f0b494a6b..3610e993f8 100644 --- a/editors/code/package.json +++ b/editors/code/package.json @@ -19,6 +19,12 @@ "categories": [ "Programming Languages" ], + "capabilities": { + "untrustedWorkspaces": { + "supported": false, + "description": "rust-analyzer invokes binaries set up by its configuration as well as the Rust toolchain's binaries. A malicious actor could exploit this to run arbitrary code on your machine." + } + }, "engines": { "vscode": "^1.66.0" }, |