[Mono-dev] Why does Mono's CoreCLR blocks internal method reflection from transparent code ?

nelson nelson.cabral at gmail.com
Tue Mar 26 14:44:11 UTC 2013


Thx

Le mardi 26 mars 2013, Robert Jordan [via Mono] a écrit :

> On 24.03.2013 19:08, nelson wrote:
> > I'm checking that code, at
> >
> https://github.com/mono/mono/blob/master/mono/metadata/security-core-clr.c.
>
> >
> > If to "ensure that the specified method can be used with reflection
> since
> > Transparent code cannot call Critical methods" is fine with me, why does
> > CoreCLR also prevents transparent code to call internal transparent
> methods
> > or properties through reflection ?
>
> In Silverlight, reflection is as powerful as statically compiled
> code. With other words, if the code does not compile due to member
> access violations, then reflection won't help either.
>
> While this rule doesn't add concrete security, it helps obscuring
> stuff from application code w/out having to decorate members with
> [SecurityCritical].
>
> Robert
>
>
> _______________________________________________
> Mono-devel-list mailing list
> [hidden email] <http://user/SendEmail.jtp?type=node&node=4659158&i=0>
> http://lists.ximian.com/mailman/listinfo/mono-devel-list
>
>
> ------------------------------
>  If you reply to this email, your message will be added to the discussion
> below:
>
> http://mono.1490590.n4.nabble.com/Why-does-Mono-s-CoreCLR-blocks-internal-method-reflection-from-transparent-code-tp4659140p4659158.html
>  To unsubscribe from Why does Mono's CoreCLR blocks internal method
> reflection from transparent code ?, click here<http://mono.1490590.n4.nabble.com/template/NamlServlet.jtp?macro=unsubscribe_by_code&node=4659140&code=bmVsc29uLmNhYnJhbEBnbWFpbC5jb218NDY1OTE0MHwtMTUzMDQxMDg0Nw==>
> .
> NAML<http://mono.1490590.n4.nabble.com/template/NamlServlet.jtp?macro=macro_viewer&id=instant_html%21nabble%3Aemail.naml&base=nabble.naml.namespaces.BasicNamespace-nabble.view.web.template.NabbleNamespace-nabble.view.web.template.NodeNamespace&breadcrumbs=notify_subscribers%21nabble%3Aemail.naml-instant_emails%21nabble%3Aemail.naml-send_instant_email%21nabble%3Aemail.naml>
>


-- 
Nelson Cabral




--
View this message in context: http://mono.1490590.n4.nabble.com/Why-does-Mono-s-CoreCLR-blocks-internal-method-reflection-from-transparent-code-tp4659140p4659159.html
Sent from the Mono - Dev mailing list archive at Nabble.com.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ximian.com/pipermail/mono-devel-list/attachments/20130326/daeb6358/attachment.html>


More information about the Mono-devel-list mailing list