You'll notice
Useful3 Signal3
Sandbox binary paths set by a project now show up in the folder trust prompt before you accept.
What's wrong with this entry?
Anonymous. No account, no email.
sandbox.bwrapPathsandbox.ripgrepsandbox.socatPath
What
When a project's settings set sandbox.bwrapPath, sandbox.ripgrep or sandbox.socatPath, those keys now appear in the summary shown before you trust the folder, and their presence disqualifies the settings file from the shortcut that auto-trusts files containing only environment variables.
Details
- The three keys are reported by name, for example
sandbox.ripgrep. - A separate check gates the quiet-trust path, so such a file always requires an explicit decision.
Evidence
"bwrapPath", "ripgrep", "socatPath"
Strings lifted out of the shipped bundle, so the claim above can be checked against them.