dev-cli icon indicating copy to clipboard operation
dev-cli copied to clipboard

Don't add defender exclusion by default

Open Hades32 opened this issue 4 years ago • 1 comments

Adding exclusions to an anti-virus is opening the system to new attack vectors, especially when it's a guessable/well-known location which is user-writable.

Therefore, it should be possible (as a developer) to completely remove this option, or even better to remove it by default and add an explicit toggle to enable it with some note, that this is a potentially risky thing to do

Ref: https://github.com/oclif/dev-cli/blob/402e9cca2401175cfb7f5baf8468605c37cd236a/src/commands/pack/win.ts#L75-L77

Hades32 avatar Nov 24 '21 11:11 Hades32

cc @srlowe @pdcastro

Hades32 avatar Nov 24 '21 11:11 Hades32