Enhance URL glob matching to enforce subdomain wildcard matching on dot boundaries

[TylerLeonhardt]

No description provided.

[Copilot]

Pull request overview

Tightens *. subdomain wildcard handling in the URL glob matcher so that *.example.com only matches on a dot boundary (or the bare apex domain), preventing unintended matches like notexample.com.

Changes:

• Update *. matching logic to only “exit” the subdomain wildcard at the start of the authority or immediately after a . in the URL.
• Add regression tests ensuring *.domain.com does not match lookalike domains lacking a dot boundary (e.g. evil-microsoft.com, notexample.com).
• Add coverage for the same dot-boundary rule when the glob omits the scheme.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File	Description
src/vs/platform/url/common/urlGlob.ts	Restricts *. wildcard transitions to dot boundaries / start-of-authority to avoid overbroad domain matches.
src/vs/platform/url/test/common/urlGlob.test.ts	Adds targeted test cases validating the new dot-boundary behavior (with and without scheme).

---

You can also share your feedback on Copilot code review. Take the survey.