You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
We should disable code that use reflection in a malicious way. For example if I reference type X inside the interpreter I should not be allowed to write an expression like:
typeof(X).Assembly
Because potentially in this way you can access and invoke any type defined in that assembly.
The same can be for instances:
xInstance.GetType().Assembly
Think about other similar security problems...
The text was updated successfully, but these errors were encountered:
Prevent unexpected access to types using reflection for security (#27) . From now expressions that call reflection throw a ReflectionNotAllowedException.
Added Interpreter.EnableReflection method to enable reflection features inside expression.
We should disable code that use reflection in a malicious way. For example if I reference type X inside the interpreter I should not be allowed to write an expression like:
Because potentially in this way you can access and invoke any type defined in that assembly.
The same can be for instances:
Think about other similar security problems...
The text was updated successfully, but these errors were encountered: