Tags: microsoft/vscode
Tags
Merged PR 759: Fix MSRC 134488 Validate media-loading sources while sanitizing chat Markdown, before the sanitized fragment is attached to a DOM node and can initiate a request. Apply validation to source and poster attributes, reject network-backed file resources, and preserve the existing plaintext fallback and genuinely local file/data image support. Add focused sanitizer, Markdown renderer, and chat renderer regression coverage. Issue: https://github.com/microsoft/vscode-internalbacklog/issues/8958 ICM: https://portal.microsofticm.com/imp/v5/incidents/details/31000000684891 CVE: CVE-2026-81380 Msrc-Case-Id: 134488
Pre-seed Integrated Browser smoke settings to avoid the relaunch prom… …pt (#328972) Pre-seed browser smoke settings instead of writing them at runtime Setting window.menuStyle through the settings editor made SettingsChangeRelauncher pop a modal 'restart to take effect' dialog on Windows/Linux, which blocked the workbench and broke the first test. Seeding both settings on disk before launch means the values are already in effect when the window opens, so no relaunch prompt appears. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
PreviousNext