6 ms·

does it have some kind of sandboxing for its extensions?

• TranquilMarmot 4mo ago
  The extension capability is much less powerful than VSCode (no embedded web view) so it's a lot harder to pull off crazy stuff. All of the language support is done via language servers.
  • mrgoldenbrown 4mo ago
    But in the process of installing those language servers (automatically, without notifying you) it will install node, and download npm packages, which can do crazy stuff, as we've seen recently with the shai halud redux
• norman784 4mo ago
  They are compiled to WASM, so they have limited IO capabilities, but still they have IO.