Fix terminal approval UI missing backslashes on Windows paths

[Copilot]

Terminal confirmation dialog renders Windows paths without separators (e.g. D:devmicrosoftvscode-packagesvscode-settings-history instead of D:\dev\microsoft\vscode-packages\vscode-settings-history).

BaseChatConfirmationWidget was embedding plain string titles directly into new MarkdownString(rawValue), causing backslashes to be interpreted as markdown escape characters. In particular, \: is a valid markdown escape that strips the preceding backslash.

Fix: Compose the MarkdownString properly based on the title type:

• String titles → appendText() (escapes markdown syntax including backslashes)
• IMarkdownString titles → appendMarkdown() (preserves existing markdown)
• Icon → always appendMarkdown() (theme icon syntax)

// Before: raw markdown embedding — backslashes treated as escape chars
new MarkdownString(icon ? `$(${icon.id}) ${typeof title === 'string' ? title : title.value}` : ...)

// After: proper composition
const titleMd = new MarkdownString('', { supportThemeIcons: true });
if (icon) {
    titleMd.appendMarkdown(`$(${icon.id}) `);
}
if (typeof title === 'string') {
    titleMd.appendText(title);
} else {
    titleMd.appendMarkdown(title.value);
}

Note: BaseSimpleChatConfirmationWidget already passes title directly to ChatQueryTitlePart, which handles string vs IMarkdownString correctly via toMdString(). Only BaseChatConfirmationWidget had the problematic raw embedding.

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• redirector.gvt1.com
  • Triggering command: /proc/self/exe /proc/self/exe --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-sandbox --crashpad-handler-pid=8131 --enable-crash-reporter=6010be29-e499-4311-bbe3-c34ba17fa46a,no_channel --user-data-dir=/tmp/vscode-tests-1776163004380 --shared-files=v8_context_snapshot_data:100 --field-trial-handle=3,i,11577962897854271121,13545931210410912147,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708989122997041 tnet/tools/git (dns block)
  • Triggering command: .build/electron/code-oss .build/electron/code-oss test/unit/electron/index.js --crash-reporter-directory=/home/REDACTED/work/vscode/vscode/.build/crashes --run src/vs/base/test/common/htmlContent.test.ts --timeout 30000 (dns block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)