CSRFing VS Code's Debug Adapter Protocol
A technical write-up for a cross-site request forgery vulnerability present in some Debug Adapter Protocol implementations. The Debug Adapter Protocol is used by VS Code and other development tools to debug programs. The write-up details the vulnerability and presents a proof-of-concept, one-click, runtime code execution exploit impacting the official Microsoft Java debugger extension for VS Code.