You'll noticeTier: how much it should matter to you
2Useful: my rating, 1 to 5
2Signal: worth watching, 1 to 5
PluginsArea: what it touches
ImprovementsKind: in v2.1.247,
ImprovementsSection of the release
What
When a plugin loaded from a local directory supplies language-server configuration, both the top-level config file and each per-server config path are now resolved to their real location and skipped with a warning if they land outside the plugin's own directory.
Details
The plugin directory, its parent chain and the target file are all resolved through symlinks before the comparison.
Applies to directory-loaded plugins only.
Evidence
which a directory-loaded plugin may not reference here.
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
