diff options
| author | Damien Engels <engels@google.com> | 2021-02-11 16:52:48 +0300 |
|---|---|---|
| committer | Damien Engels <engels@google.com> | 2021-02-11 18:08:52 +0300 |
| commit | 58eb43beaa503f638c34f1133cb01947431bbbc6 (patch) | |
| tree | 62693fd81ccc744446187f632aa4b0714e76c554 /src/tsec.exemptions.json | |
| parent | 33a92ebf4aca861a1112a15b6935768bd21273b1 (diff) | |
List all tsec exemption explicitly
This implies a few things:
- tsec's output is clear so it can be included as a CI check
- code introducing new violations need to update the exemption list,
making it clear there is something security-sensitive about the code
Diffstat (limited to 'src/tsec.exemptions.json')
| -rw-r--r-- | src/tsec.exemptions.json | 28 |
1 files changed, 27 insertions, 1 deletions
diff --git a/src/tsec.exemptions.json b/src/tsec.exemptions.json index dc1e805868f..34fb2f4d8d2 100644 --- a/src/tsec.exemptions.json +++ b/src/tsec.exemptions.json @@ -1,5 +1,31 @@ { + "ban-eval-calls": [ + "vs/workbench/api/worker/extHostExtensionService.ts" + ], + "ban-function-calls": [ + "vs/workbench/api/worker/extHostExtensionService.ts", + "vs/workbench/contrib/notebook/browser/view/renderers/webviewPreloads.ts", + "vs/workbench/services/keybinding/test/electron-browser/keyboardMapperTestUtils.ts" + ], "ban-trustedtypes-createpolicy": [ - "**/*.ts" + "vs/base/browser/dom.ts", + "vs/base/browser/markdownRenderer.ts", + "vs/base/worker/defaultWorkerFactory.ts", + "vs/base/worker/workerMain.ts", + "vs/editor/browser/core/markdownRenderer.ts", + "vs/editor/browser/view/domLineBreaksComputer.ts", + "vs/editor/browser/view/viewLayer.ts", + "vs/editor/browser/widget/diffEditorWidget.ts", + "vs/editor/browser/widget/diffReview.ts", + "vs/editor/standalone/browser/colorizer.ts", + "vs/workbench/api/worker/extHostExtensionService.ts", + "vs/workbench/contrib/notebook/browser/view/renderers/cellRenderer.ts", + "vs/workbench/contrib/notebook/browser/view/renderers/webviewPreloads.ts", + "vs/workbench/services/extensions/browser/webWorkerExtensionHost.ts", + "vs/workbench/services/extensions/worker/extensionHostWorkerMain.ts" + ], + "ban-worker-calls": [ + "vs/base/worker/defaultWorkerFactory.ts", + "vs/workbench/services/extensions/browser/webWorkerExtensionHost.ts" ] } |