logoalt Hacker News

echoangletoday at 10:36 AM2 repliesview on HN

https://code.visualstudio.com/docs/editing/workspaces/worksp...

It is very clear, the first sentence it that it may automatically execute code.


Replies

duskdozertoday at 11:05 AM

>Code provides features that may automatically execute files...

What features? What files? "may"? So will it actually happen or is it just "well it possibly could"?

I've used it to open folders that I personally made and which don't have any tasks or files that get automatically executed, and yet the message pops up anyway.

It's like having an antivirus program that unconditionally flags every file as "this file may contain a virus"

show 2 replies
abecedariustoday at 1:21 PM

Thing is, when you open a webpage it's clear that it may automatically execute code (Javascript, WebAssembly). What needs to be clear (and by default limited) is the authority of that code.