fix(vscode): make the extension's send path work, and close the security holes

fix(vscode): make the extension's send path work, and close the security holes #2803