2026-01-21 08:03 UTC
@emily_s@mastodon.me.uk none, it’s intended for doing exactly that sort of thing
Replies (2)
-
@emily_s@mastodon.me.uk 2026-01-21 08:07
@0xabad1dea@infosec.exchange oh no...
-
@natkr@hachyderm.io 2026-01-21 08:09
@0xabad1dea@infosec.exchange @emily_s@mastodon.me.uk In fact, that prompt /is/ the improvement over back in the day when editors would just do it completely silently. If anything, it feels like LSP was a bit of a turning point around editors asking at all. (That said, the prompts are still pretty awful.. lsp-mode (in Emacs) just asks "would you like to import this project?".. would you expect that to allow arbitrary code execution too?)