1.123.1: Cherry pick/msrc 1.123 to release 1.123 (#320632)

• 
  

  OTel visibility in Copilot Chat UI (#47)

  
  


• 
  

  [msrc/1.123] 114763

  
  


• 
  

  Add maxAttributeSizeChars configuration to OpenTelemetry settings

  
  

Co-authored-by: Zhichao Li [email protected]

(cherry picked from commit 042dc59)

• Prompt before connecting to non-loopback remote host:port authorities (#46)

A direct <host>:<port> remote authority (no resolver + prefix) bypasses

resolver extensions and connects straight to the given server. Since this form

can originate from untrusted sources (e.g. the remoteAuthority of a

.code-workspace file), a crafted workspace could silently point the window's

extension host backend at an attacker-controlled server.

Centralize a confirmation prompt at the connection point in the renderer:

when resolving a direct authority whose host is not loopback (localhost,

127.0.0.1, ::1), ask the user to confirm before connecting and abort if

declined. Add isLoopbackHost helper and tests.

(cherry picked from commit 9505d0f)

• GitHub - improve host parsing (#48)

(cherry picked from commit 4b6e246)

• 
  

  path traversal fix (#50)

  
  


• 
  

  fix path traversal

  
  


• 
  

  fix compilation

  
  

(cherry picked from commit 9b31ff8)

• Path - improve isEqualOrParent calculation (#49)

(cherry picked from commit 0f1ba1e)

• Version bump to 1.123.1 (#52)

(cherry picked from commit db24d8b)

• copilot: update engines.vscode to ^1.123.1

(cherry picked from commit ffa3c3f)

Co-authored-by: Zhichao Li [email protected]

Co-authored-by: Zhichao Li [email protected]

Co-authored-by: Alexandru Dima [email protected]

Co-authored-by: Ladislau Szomoru [email protected]

Co-authored-by: Sandeep Somavarapu [email protected]

Co-authored-by: ulugbekna [email protected]