Note: Workspace Trust can not prevent a malicious extension from executing code and ignoring Restricted Mode.
#Safe in cloud extension full#
To see the full list of features disabled in Restricted Mode, you can open the Workspace Trust editor via the Manage link in the banner, or by clicking the Restricted Mode badge in the Status bar. Restricted Mode tries to prevent automatic code execution by disabling or limiting the operation of several VS Code features: tasks, debugging, workspace settings, and extensions. You will also see a Restricted Mode badge in the Status bar. The workbench will display a banner at the top with links to Manage your folder via the Workspace Trust editor, and Learn More about Workspace Trust (which takes you to back to this documentation). When prompted by the Workspace Trust dialog, if you choose No, I don't trust the authors, VS Code will go into Restricted Mode to prevent code execution. You can think of a "workspace" as a folder with extra metadata created and used by VS Code. Note: The terms "workspace" and "folder" are used widely in the VS Code UI and documentation. Workspace Trust provides an extra layer of security when working with unfamiliar code, by preventing automatic code execution of any code in your workspace if the workspace is open in "Restricted Mode". However, using open-source code and tools does have risks, and you can leave yourself open to malicious code execution and exploits. It is also great that there are so many powerful coding tools available to help you understand, debug, and optimize your code. No matter the coding task or problem, there is probably already a good solution available somewhere. It's great that there is so much source code available on public repositories and file shares.
Note: When in doubt, leave a folder in Restricted Mode.
The Workspace Trust feature lets you decide whether code in your project folder can be executed by VS Code and extensions without your explicit approval.
Visual Studio Code takes security seriously and wants to help you safely browse and edit code no matter the source or original authors.
0 kommentar(er)
