InfoQ
·
VS Code 1.123 Adds Two-Hour Extension Update Delay to Limit Supply Chain Attacks
📝
内容提要
VS Code 1.123 adds a two-hour delay before auto-updating extensions to newly published versions, creating a revocation window against supply chain attacks. The delay does not apply to trusted...
🏷️
