Skip to content

fix(vscode-extension): prompt for confirmation before loading workspa…#68857

Open
atscott wants to merge 1 commit into
angular:mainfrom
atscott:tsdkhardenin
Open

fix(vscode-extension): prompt for confirmation before loading workspa…#68857
atscott wants to merge 1 commit into
angular:mainfrom
atscott:tsdkhardenin

Conversation

@atscott
Copy link
Copy Markdown
Contributor

@atscott atscott commented May 21, 2026

…ce tsdk

Harden the typescript.tsdk and js/ts.tsdk.path settings loading in the VS Code extension client.

This change hardens tsdk loading by:

  1. Ignoring workspace-level tsdk paths in untrusted workspaces.
  2. Prompting the user for explicit confirmation before loading a workspace-level tsdk path in trusted workspaces, and saving the approval state in a secure, local workspaceState.

…ce tsdk

Harden the typescript.tsdk and js/ts.tsdk.path settings loading
in the VS Code extension client.

This change hardens tsdk loading by:
1. Ignoring workspace-level tsdk paths in untrusted workspaces.
2. Prompting the user for explicit confirmation before loading a
   workspace-level tsdk path in trusted workspaces, and saving the
   approval state in a secure, local workspaceState.
@angular-robot angular-robot Bot added the area: vscode-extension Issues related to the Angular Language Service VsCode extension label May 21, 2026
@ngbot ngbot Bot added this to the Backlog milestone May 21, 2026
@atscott atscott added the target: patch This PR is targeted for the next patch release label May 21, 2026
@atscott atscott requested a review from alan-agius4 May 21, 2026 17:05
@atscott atscott added target: minor This PR is targeted for the next minor release and removed target: patch This PR is targeted for the next patch release labels May 21, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area: vscode-extension Issues related to the Angular Language Service VsCode extension target: minor This PR is targeted for the next minor release

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant