From 7fc0f8985dcd51db19b30b8a77345bcaa5daff79 Mon Sep 17 00:00:00 2001 From: Lukas Wirth Date: Thu, 9 Feb 2023 17:34:21 +0100 Subject: Explicitly disable the rust-analyzer extension in unstrusted workspaces --- editors/code/package.json | 6 ++++++ 1 file changed, 6 insertions(+) (limited to 'editors/code') diff --git a/editors/code/package.json b/editors/code/package.json index 7160781b6f3..99503670017 100644 --- a/editors/code/package.json +++ b/editors/code/package.json @@ -19,6 +19,12 @@ "categories": [ "Programming Languages" ], + "capabilities": { + "untrustedWorkspaces": { + "supported": false, + "description": "rust-analyzer invokes binaries set up by its configuration as well as the Rust toolchain's binaries. A malicious actor could exploit this to run arbitrary code on your machine." + } + }, "engines": { "vscode": "^1.66.0" }, -- cgit 1.4.1-3-g733a5