Major security issue in module

mkloubert / vs-deploy

Visual Studio Code extension that provides commands to deploy files of a workspace to a destination.

https://marketplace.visualstudio.com/items?itemName=mkloubert.vs-deploy

MIT License

131 stars 24 forks source link

Major security issue in module #163

Open defcon8 opened 5 years ago

defcon8 commented 5 years ago

I use deploy to upload files to my webserver automatically on change/save. However Deploy should never ever deploy it's own .vscode/settings.json which can contain plain-text credentials for that host! In case of a webserver target, the chances are big that this file is served to the internet! This file should be ignored "hard coded" at all times.