-
Feature Request
-
Resolution: Done
-
Blocker
-
3.17.0.GA
-
False
-
-
False
-
Release Notes
-
-
Enhancement
-
Done
-
-
Currently, users can manually download unapproved extensions in VSIX format from the Microsoft Marketplace or OpenVSX. They can then manually install these extensions in a Dev Spaces workspace, bypassing the need to install from an internal extension registry, which contains a curated list of extensions.
The ability to do the above circumvents security and allows users to install potentially malicious extensions.
- links to
(5 links to)