CLion 2023.3 Help

Project security

To prevent potential security risks, CLion lets you decide how to open a project if you're not sure about its source. CLion warns you about tasks or configurations that will be executed during the opening process and lets you configure sources that you can trust.

Open a project from unknown sources

When you open a CMake, Makefile, or Gradle project, CLion executes its build scripts during the loading process. These build scripts can contain arbitrary (potentially dangerous) code.

Every time you open a project for the first time, the IDE shows the Trust Project dialog. This helps to ensure that the project is safe to perform the following actions:

Trust Project dialog

You can select one of the following actions:

  • Preview in Safe Mode: in this case, CLion opens the project in Safe Mode, meaning you can browse the project's sources, but there are restrictions in executing code, performing build-related activities, and running scripts (for example, executing Gradle tasks, loading and running CMake or Makefile targets) .

    CLion notifies you about Safe Mode on top of the editor area. You can click the Trust project link and load your project at any time.

    cl_trust_cmake_editor_notification.png

    If you try to reload the project or execute targets in case of CMake or Makefile, or run Gradle tasks using menu items, dedicated tool windows, or the Run Anything window, CLion will prompt you to confirm that you trust the project before proceeding:

    cl_trust_cmake_load.png
  • Trust Project: in this case, CLion opens and initializes the project, resolves project plugins, adds dependencies, and enables all CLion features.

  • Don't Open: in this case, CLion cancels the action.

Startup tasks

When you open a project created on a different machine, it might contain some scripts or tasks that are executed during the opening process. If such tasks are found, CLion displays a notification suggesting that the code you are about to execute might be harmful.

You can review what tasks will be executed and modify the settings.

Review the startup tasks

  1. In the Settings dialog (Ctrl+Alt+S) , go to Tools | Startup Tasks.

  2. On the Startup Tasks settings page, you can review and modify the startup tasks.

Safe mode preview limitations

If you open a project in Safe Mode, the following limitations will apply:

  • Startup tasks: any scripts or tasks that are executed during the opening process are disabled.

  • VCS support: VCS support is fully disabled.

  • File Watcher scripts will not wake up and run corresponding tools.

Trusted locations

You can configure what sources CLion should consider safe and load such projects automatically during the opening process.

You can add your home directory to the trusted locations to disable CLion's warnings about untrusted projects.

Configure trusted locations

  1. In the Settings dialog (Ctrl+Alt+S) , go to Build, Execution, Deployment | Trusted Locations.

  2. On the Trusted Locations settings page, specify the local directories that the IDE should trust. Click OK to save the changes.

    Trusted Locations

    The next time you open a project from one of those locations, CLion will implicitly trust it.

Last modified: 23 February 2024