Is “Code Access Security” of any real world use?

前端 未结 8 1486
一向
一向 2020-12-02 08:38

Warning:

Newer versions of .Net and .Net core has have removed and/or changed “Code Access Security” (CAS) since this question was asked.

Original Questio

8条回答
  •  生来不讨喜
    2020-12-02 09:15

    One thing you should know is that Code Access Security is pretty much broken as a method for tamper-proofing. See:

    CAS Tamper-Proofing is Broken: Consequences for Software Licensing

    ...

    Code Access Security can no longer be relied upon to prevent the use of tampered assemblies in shipped products. This means that if your application is dependent upon Code Access Security to perform licensing checks, it is trivial for an attacker to replace your licensing assembly with another, thereby gaining free access to your application.

    ...

提交回复
热议问题