Skip to content

pyobfus VS Code extension 0.4.2

Choose a tag to compare

@zhurong2020 zhurong2020 released this 06 Sep 03:45
· 23 commits to main since this release

Security

  • "Generate pyobfus.yaml" now contains its writes to the workspace. The command canonicalizes the configuration path returned by the pyobfus CLI (resolving symlinks with fs.realpath) and refuses to read or modify it unless the resolved file is named pyobfus.yaml and lies inside the resolved workspace root. Symlink escapes are rejected rather than followed.

    This is defensive hardening of the extension's own file handling — it removes the possibility of the command touching a file outside the workspace if the CLI ever returned an unexpected path.


Install: download pyobfus-0.4.2.vsix below and run code --install-extension pyobfus-0.4.2.vsix, or get it from the VS Code Marketplace.

Requires the pyobfus PyPI package on a resolvable interpreter.