Safeguard init exthost message

src/vs/workbench/services/extensions/browser/webWorkerExtensionHost.ts

@@ -189,7 +189,7 @@ export class WebWorkerExtensionHost extends Disposable implements IExtensionHost
 
 		// Send over message ports for extension API
 		const messagePorts = this._environmentService.options?.messagePorts ?? new Map();
-		iframe.contentWindow!.postMessage(messagePorts, '*', [...messagePorts.values()]);
+		iframe.contentWindow!.postMessage({ type: 'vscode.init', data: messagePorts }, '*', [...messagePorts.values()]);
 
 		port.onmessage = (event) => {
 			const { data } = event;

src/vs/workbench/services/extensions/worker/extensionHostWorker.ts

@@ -216,20 +216,33 @@ function connectToRenderer(protocol: IMessagePassingProtocol): Promise<IRenderer
 
 let onTerminate = (reason: string) => nativeClose();
 
+interface IInitMessage {
+	readonly type: 'vscode.init';
+	readonly data: ReadonlyMap<string, MessagePort>;
+}
+
+function isInitMessage(a: any): a is IInitMessage {
+	return !!a && typeof a === 'object' && a.type === 'vscode.init' && a.data instanceof Map;
+}
+
 export function create(): { onmessage: (message: any) => void } {
 	performance.mark(`code/extHost/willConnectToRenderer`);
 	const res = new ExtensionWorker();
 
 	return {
-		onmessage(messagePorts: ReadonlyMap<string, MessagePort>) {
+		onmessage(message: any) {
+			if (!isInitMessage(message)) {
+				return; // silently ignore foreign messages
+			}
+
 			connectToRenderer(res.protocol).then(data => {
 				performance.mark(`code/extHost/didWaitForInitData`);
 				const extHostMain = new ExtensionHostMain(
 					data.protocol,
 					data.initData,
 					hostUtil,
 					null,
-					messagePorts
+					message.data
 				);
 
 				onTerminate = (reason: string) => extHostMain.terminate(reason);