From 7fc0f8985dcd51db19b30b8a77345bcaa5daff79 Mon Sep 17 00:00:00 2001 From: Lukas Wirth Date: Thu, 9 Feb 2023 17:34:21 +0100 Subject: [PATCH] Explicitly disable the rust-analyzer extension in unstrusted workspaces --- editors/code/package.json | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/editors/code/package.json b/editors/code/package.json index 7160781b6f3e..995036700177 100644 --- a/editors/code/package.json +++ b/editors/code/package.json @@ -19,6 +19,12 @@ "categories": [ "Programming Languages" ], + "capabilities": { + "untrustedWorkspaces": { + "supported": false, + "description": "rust-analyzer invokes binaries set up by its configuration as well as the Rust toolchain's binaries. A malicious actor could exploit this to run arbitrary code on your machine." + } + }, "engines": { "vscode": "^1.66.0" },