Project security
To prevent potential security risks, Aqua lets you decide how to open a project if you're not sure about its source. Aqua warns you about tasks or configurations that will be executed during the opening process and lets you configure sources that you can trust.
Open a project from unknown sources
When you open a project, such as Gradle or Maven, Aqua executes its build scripts during the loading process. These build scripts can contain arbitrary (potentially dangerous) code.
Every time you open a project for the first time, the IDE shows the Trust Project dialog. This helps to ensure that the project is safe to perform the following actions:
You can select one of the following actions:
Preview in Safe Mode: in this case, Aqua opens the project in Safe Mode, meaning you can browse the project's sources, but there are restrictions in executing code, performing build-related activities, and running scripts.
For more information about Safe Mode preview limitations, refer to Safe mode preview limitations.
Aqua notifies you about Safe Mode on top of the editor area. You can click the Trust project link and load your project at any time.
Trust Project: in this case, Aqua opens and initializes the project, resolves project plugins, adds dependencies, and enables all Aqua features.
Don't Open: in this case, Aqua cancels the action.
Safe mode preview limitations
If you open a project in Safe Mode, the following limitations will apply:
The Gradle or Maven import: for a project that contains any build tool, the importing process is disabled. So, no build scripts are executed and no dependencies are resolved.
Startup tasks: any scripts or tasks that are executed during the opening process are disabled.
VCS support: VCS support is fully disabled.
GDSL scripts: any Groovy DSL scripts will not be executed.
File Watcher scripts will not wake up and run corresponding tools.
Trusted locations
You can configure what sources Aqua should consider safe and load such projects automatically during the opening process.
You can add your home directory to the trusted locations to disable Aqua's warnings about untrusted projects.
Configure trusted locations
In the Settings dialog (Ctrl+Alt+S) , go to .
On the Trusted Locations settings page, specify the local directories that the IDE should trust. Click OK to save the changes.
The next time you open a project from one of those locations, Aqua will implicitly trust it.