0 Fork 0

mirror of https://github.com/microsoft/vscode.git synced 2026-10-06 16:39:08 +01:00

Files

T

Benjamin Christopher SimmondsandCopilot fab0e01e6b notifications: Harden untrusted notification text (#339072 )

* notifications: Harden untrusted notification text

Render core notification and progress strings literally, with explicit typed links and a narrowly scoped extension compatibility capability. Preserve existing link actions, accessibility, and extension behavior, and guard reflected text in built-in extensions with consistent fallback helpers.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* notifications: Address capability export and accessibility feedback

Follow scope-aware aliases and returned values when checking exports of the legacy notification parsing capability. Cover named functions/classes, shadowing, recursive references, and legitimate bridge use. Make notification link guidance conditional for link-free Accessible View content.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

---------

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

2026-10-01 15:35:37 +02:00