Yes and yes, the Castle libraries have not been audited to ensure that they cannot be coerced into doing dangerous things on behalf of untrusted code.
This article provides a good overview of what APTCA is all about, the 3 bullet points in the middle summarise our stance on this. You will also find other information on the same topic if you search the archives of the castle users and development mailings lists. http://blogs.msdn.com/shawnfa/archive/2005/02/04/367390.aspx However, at some point we may consider marking assemblies security transparent/critical, but that would involve someone auditing our current link demands (there isn't many) and working out whether we can safely mark them security critical. On Fri, Nov 13, 2009 at 11:48 AM, Adam Langley <[email protected]>wrote: > I have recently been working on an AddIn for Microsoft Outlook 2003, and > making heavy use of Windsor. > Outlook loads everything into a partial trust environment - is there a > reason these castle projects (Windsor/Core/MicroKernel/DynamicProxy) > do not have the AllowPartiallyTrustedCallers Attribute? > Would there be a problem putting it in? It would be nice not having to > build my own versions of castle to get it to work in Outlook... > > Thanks! > > Adam Langley > Senior Developer > +64 9 486 9010 > www.winscribe.com > > > Please consider the environment before printing this email! > > > -- > > You received this message because you are subscribed to the Google Groups > "Castle Project Users" group. > To post to this group, send email to [email protected] > . > To unsubscribe from this group, send email to > [email protected]<castle-project-users%[email protected]> > . > For more options, visit this group at > http://groups.google.com/group/castle-project-users?hl=. > > > -- Jono -- You received this message because you are subscribed to the Google Groups "Castle Project Users" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/castle-project-users?hl=.
