3 ms·
Sufficient for what? It's sufficient for preventing an extension from accessing tokens on my filesystem, from connecting to arbitrary networks, stealing my brow
by insanitybit 5mo ago
Sufficient for what? It's sufficient for preventing an extension from accessing tokens on my filesystem, from connecting to arbitrary networks, stealing my browser session cookies, etc. It's sufficient for a fucking lot.
This is how browsers have been doing things for 20 years, it's ridiculous that a company worth billions isn't doing it.
- gchamonlive 5mo agoDon't know what you are talking about, browser extensions implement granular permissions on top of sandboxing too. https://developer.chrome.com/docs/extensions/reference/permissions-list https://developer.chrome.com/docs/extensions/reference/permi... https://support.mozilla.org/en-US/kb/manage-optional-permissions-extensions https://support.mozilla.org/en-US/kb/manage-optional-permiss...
- insanitybit 5mo agoPerhaps I was unclear. I am suggesting exactly that browsers do this correctly and that vscode should be following that old, tried and true model.