Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Vscode is a browser


As in "it runs JavaScript and renders HTML", yes. As in "it runs stuff in a security sandbox", no.


How about extensions? I would have thought these amount to a comparable security concern as web pages. Do they have adequate isolation?


No, extensions are fully trusted. They can do anything.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: