2 ms·
Cursor is an editor. Why is it executing untrusted code when a folder is opened? Opening a folder is not equivalent to executing a script contained in the repo.
by jeremyjh 3mo ago
Cursor is an editor. Why is it executing untrusted code when a folder is opened? Opening a folder is not equivalent to executing a script contained in the repo. How can you think that is ok?
- dev_daftly 3mo agoIt's not executing untrusted code, it's calling git when you have a malicious version of git on your system
- jeremyjh 3mo agoNo, read the report. It will call an executable called git.exe in the untrusted repo.