{"version":"1.0.113","anchor":"workspace-trust-validation-for-opentelemetry-helpers","canonical_anchor":"workspace-trust-validation-for-opentelemetry-helpers","heading":"Workspace Trust Validation for OpenTelemetry Helpers","tier":null,"area":null,"scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/1.0.113\/e\/workspace-trust-validation-for-opentelemetry-helpers","release_url":"https:\/\/changelogs.core-directive.com\/v\/1.0.113","markdown":"### Workspace Trust Validation for OpenTelemetry Helpers\n\n**What changed:** OpenTelemetry headers from project\/local settings now require workspace trust **Why it matters:** Prevents arbitrary code execution from untrusted project configurations **Details:**\n\n- New function `CZ1()` at line 371858 detects if otelHeadersHelper comes from project\/local settings\n- Function `ph2()` at line 371865 checks workspace trust via `mx(!0)` before executing helpers\n- Returns empty headers instead of executing untrusted code\n- Part of broader security hardening effort\n- **Evidence**: Replaces simpler `bh2()` at line 371852 in v1.0.112"}