VS Code 扩展安全性如何处理? [英] How is VS Code Extension Security Handled?
问题描述
我已经使用 VS Code 一年左右了.我不知道如何处理 VS Code 扩展安全性.我对这样的事情感到震惊:
I've been using VS Code for a year or so now. I have no idea how VS Code Extension security is handled. I'm alarmed by things like this:
- Markdown 预览增强(927K+ 次下载)
- Markdown 预览增强(指向原始 repo 的 fork)(2k+ 次下载)
- Markdown Preview Enhanced (927K+ downloads)
- Markdown Preview Enhanced (fork that points to the original repo) (2k+ downloads)
我的一些问题是:
- Microsoft 如何确保我们安装的扩展程序安全?
- 他们是否正在扫描扩展程序中的已知漏洞?
- 在企业环境中使用 VS Code 是否安全?
- 我怎么知道?
有人对 VS Code 扩展安全性有什么见解要分享吗?
Does anyone have insights to share regarding VS Code Extension Security?
推荐答案
嗯.不幸的是，@jonrsharpe 提供的扩展市场条款"链接不包含扩展"一词.如果您推断 VS Code 扩展包含在 Azure 市场 条款中(如文中所述)，那么您会得到这个小花絮:
Hm. Unfortunately, the link to "extension marketplace terms" that @jonrsharpe provided does not include the word "extension". If you extrapolate VS Code Extensions to be covered by the Azure Marketplace terms (as alluded to in the text), then you get this little tidbit:
https://azure.microsoft.com/en-我们/支持/法律/市场条款/
发布商隐私政策.出版商负责提供隐私声明，尊重地描述他们的隐私惯例通过他们的产品或任何客户收集的客户数据他们从 Microsoft 收到的信息.除非另有说明否则与发布的市场产品有关Microsoft、Microsoft 的隐私、安全以及数据位置和数据保留政策不适用于任何市场产品或发布商对任何客户数据或其他客户信息的使用.
Publisher Privacy Policies. Publishers are responsible for providing privacy statements that describe their privacy practices with respect to Customer Data collected by their Offerings or any customer information that they receive from Microsoft. Unless indicated otherwise in connection with a Marketplace Offering published by Microsoft, Microsoft’s privacy, security, and data location and data retention policies will not apply to any Marketplace Offering or to Publishers’ use of any Customer Data or other customer information.
简而言之...Microsoft 的隐私、安全...政策将不适用于任何..."VS 代码扩展 或...发布者对任何客户数据或其他客户信息."
In short "...Microsoft's privacy, security...policies will not apply to any..." VS Code Extensions OR to "...Publishers' use of any Customer Data or other customer information."
Microsoft 不处理 VS Code 扩展安全.
Microsoft does NOT handle VS Code Extension Security.
这篇关于VS Code 扩展安全性如何处理?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！
