Jaime Burgos ba13a3ce22 fix(vscode-extension): prevent command URI injection in TSDK approval ...

VS Code parses notification text for links and permits `command:` URIs. Interpolating the workspace-controlled TSDK path can therefore let a malicious path add a command link to the approval prompt.

Remove the path from the notification instead of attempting to sanitize or escape it. This keeps the prompt static and matches VS Code's TypeScript extension workspace-version approval flow.

Fixes #70176

2026-08-13 13:34:36 -07:00

..

src

fix(vscode-extension): prevent command URI injection in TSDK approval

2026-08-13 13:34:36 -07:00

BUILD.bazel

build: migrate to in-repo ts_project with strict deps (#64306)

2025-10-09 10:00:31 -07:00