Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Prevent unexpected access to other types using reflection for security #27

Closed
davideicardi opened this issue Jan 17, 2015 · 1 comment
Closed
Labels
Milestone

Comments

@davideicardi
Copy link
Member

We should disable code that use reflection in a malicious way. For example if I reference type X inside the interpreter I should not be allowed to write an expression like:

typeof(X).Assembly

Because potentially in this way you can access and invoke any type defined in that assembly.
The same can be for instances:

xInstance.GetType().Assembly

Think about other similar security problems...

@davideicardi
Copy link
Member Author

Prevent unexpected access to types using reflection for security (#27) . From now expressions that call reflection throw a ReflectionNotAllowedException.
Added Interpreter.EnableReflection method to enable reflection features inside expression.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

1 participant