-
Notifications
You must be signed in to change notification settings - Fork 31
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Whitelist System.Linq.Expression assembly 🙌 #56
Comments
System.Linq.Expressions feels pretty risky to whitelist, what did you want to do with it? |
@Metapyziks Few usages exemples:
|
Sadly we can't just whitelist the whole System.Linq.Expressions assembly because there are plenty of members that would let people get around the whitelist for other types. For example Expression.Call would let you call an arbitrary method by name. The best you could hope for is us allowing specific members that we're certain are safe, but there's a lot of surface area there so it'll take a long time and isn't super high priority. |
Sure, this is not a priority, but that can be good to find a way to add this kind of functionality. Maybe with a "Wrapper" like the TypeLibrary for Reflexion |
I don't think this assembly could pose any security problems.
The text was updated successfully, but these errors were encountered: