3 ms·
This may only provide a flalse sense of security. Afaik, there is no way to disable workspace settings taking priority over user settings, so a malious repo can
by StingyJelly 9mo ago
This may only provide a flalse sense of security. Afaik, there is no way to disable workspace settings taking priority over user settings, so a malious repo can easily override them and reenable automatic tasks.
- Tyriar 9mo agoVarious settings are `restricted` in the codebase to only use them when the workspace is trusted. `allowAutomaticTasks` is one such setting: https://github.com/microsoft/vscode/blob/f7730c409e14af94d75ba79fe2df96beda1b0cbd/src/vs/workbench/contrib/tasks/browser/task.contribution.ts#L546 https://github.com/microsoft/vscode/blob/f7730c409e14af94d75... So a malicious repo can easily override it... if you say you trust it.