1. 24 1月, 2018 3 次提交
  2. 23 1月, 2018 6 次提交
  3. 20 1月, 2018 3 次提交
  4. 19 1月, 2018 3 次提交
  5. 18 1月, 2018 10 次提交
  6. 17 1月, 2018 1 次提交
    • M
      Allow loading webview outside of file: origin (#41698) · cbf9ae23
      Matt Bierner 提交于
      * Allow loading webview outside of file: origin
      
      **Problem**
      Webviews are currently always loaded from a file on the disk. This results in the webview running in the file origin, potentially allowing it to access any file on disk. If a webview fails to sanitize workspace or remote input, untrusted code could potentially access files on the user's system.
      
      **Fix**
      Add a new option to serve the webview out of a "data:" uri instead. This prevents access to `file://` resources.
      
      In order to allow webviews to still load resources from disk, add a new protocol called `vscode-core-resource://` that only allows access to resources inside of the vscode directory.
      
      Moves extension pages and our release notes to use this new option. These already are pretty locked down. We cannot move the htmlpreview command to use this option as it would break a huge number of existing extensions, however the new webview API will always have this new option enabled.
      
      * Shorted protocol name
      cbf9ae23
  7. 15 1月, 2018 1 次提交
  8. 14 1月, 2018 1 次提交
  9. 11 1月, 2018 1 次提交
    • M
      Add log uploader command line util (#41318) · 9a2d1d20
      Matt Bierner 提交于
      * Add log uploader command line option
      
      Adds a new --upload-logs command line flag that allows users to upload log files from their current session to a secure endpoint
      
      * Use TPromise
      
      * Better argv description
      
      * Fix var spell
      
      * Use request service
      9a2d1d20
  10. 10 1月, 2018 5 次提交
  11. 09 1月, 2018 2 次提交
  12. 28 12月, 2017 1 次提交
  13. 20 12月, 2017 3 次提交