Even if you forbid .env, Python can still read it

API keys. Suppose you wrote this one line in your Claude Code configuration file.{ "permissions": { "deny": ...
MUO on MSN

VS Code has been letting you write invalid JSON for years, and it’s completely intentional

Your config files were never really JSON, as Microsoft planned it that way.