UNC allow list checks cannot be disabled in extension host (fix #184989) (#185085)

* UNC allow list checks cannot be disabled in extension host (#184989)

* Update src/vs/base/node/unc.js

Co-authored-by: Robo <[email protected]>

---------

Co-authored-by: Robo <[email protected]>

Author: bpasero

src/vs/base/node/unc.d.ts

@@ -23,3 +23,8 @@ export function addUNCHostToAllowlist(allowedHost: string | string[]): void;
  * path validation.
  */
 export function disableUNCAccessRestrictions(): void;
+
+/**
+ * Whether UNC Host allow list in node.js is disabled.
+ */
+export function isUNCAccessRestrictionsDisabled(): boolean;

src/vs/base/node/unc.js

@@ -117,11 +117,20 @@
 			process.enableUNCAccessChecks = false;
 		}
 
+		function isUNCAccessRestrictionsDisabled() {
+			if (process.platform !== 'win32') {
+				return true;
+			}
+
+			return process.enableUNCAccessChecks === false;
+		}
+
 		return {
 			getUNCHostAllowlist,
 			addUNCHostToAllowlist,
 			getUNCHost,
-			disableUNCAccessRestrictions
+			disableUNCAccessRestrictions,
+			isUNCAccessRestrictionsDisabled
 		};
 	}
 

src/vs/platform/utilityProcess/electron-main/utilityProcess.ts

@@ -17,7 +17,7 @@ import { ILifecycleMainService } from 'vs/platform/lifecycle/electron-main/lifec
 import { removeDangerousEnvVariables } from 'vs/base/common/processes';
 import { deepClone } from 'vs/base/common/objects';
 import { isWindows } from 'vs/base/common/platform';
-import { getUNCHostAllowlist } from 'vs/base/node/unc';
+import { isUNCAccessRestrictionsDisabled, getUNCHostAllowlist } from 'vs/base/node/unc';
 
 export interface IUtilityProcessConfiguration {
 
@@ -259,7 +259,11 @@ export class UtilityProcess extends Disposable {
 		}
 		env['VSCODE_CRASH_REPORTER_PROCESS_TYPE'] = configuration.type;
 		if (isWindows) {
-			env['NODE_UNC_HOST_ALLOWLIST'] = getUNCHostAllowlist().join('\\');
+			if (isUNCAccessRestrictionsDisabled()) {
+				env['NODE_DISABLE_UNC_ACCESS_CHECKS'] = '1';
+			} else {
+				env['NODE_UNC_HOST_ALLOWLIST'] = getUNCHostAllowlist().join('\\');
+			}
 		}
 
 		// Remove any environment variables that are not allowed