code-server

code-server at a glance

code-server is a popular open-source tool that runs VS Code in a browser from a remote server, giving a full editor on any device. code-server ships regular releases tracking VS Code plus security fixes; as a web-accessible editor with server-side execution, hardening and prompt patching are essential.

For admins code-server is effectively remote shell access with an editor, so it is a high-value target — never expose it to the internet without strong authentication and TLS, put it behind a reverse proxy (and ideally VPN or SSO), and keep it current. Because it can run code and access the file system with the server's privileges, scope what the server account can reach. Extensions run with its privileges — curate them. Keep it in step with VS Code for features and fixes. After updating, verify login and that the editor and terminal work. Track releases; patchletter surfaces new code-server versions so security fixes land.