Commit Graph
1 Commits
Author SHA1 Message Date
Dhanu-dynamic 112d255414 Do not trust code execution settings from .jedi/project.json (#2108)
get_default_project() loads the first .jedi/project.json above the analysed file, which can be part of a checked out repository. Its environment_path was executed with safe=False and its load_unsafe_extensions was honoured. Loaded projects now check the binary like find_virtualenvs and ignore load_unsafe_extensions.
2026-09-26 12:52:55 +00:00