Jaime Burgos 8adaa09f95 fix(vscode-extension): prevent command URI injection in TSDK approval ...

VS Code parses notification text for links and permits `command:` URIs. Interpolating the workspace-controlled TSDK path can therefore let a malicious path add a command link to the approval prompt.

Remove the path from the notification instead of attempting to sanitize or escape it. This keeps the prompt static and matches VS Code's TypeScript extension workspace-version approval flow.

Fixes #70176

(cherry picked from commit ba13a3ce22)

2026-08-13 20:34:40 +00:00

..

src

fix(vscode-extension): prevent command URI injection in TSDK approval

2026-08-13 20:34:40 +00:00

BUILD.bazel

build: migrate to in-repo ts_project with strict deps (#64306)

2025-10-09 10:00:31 -07:00