RE: IE hosting and security

From: Shawn Farkas (shawnfa_at_online.microsoft.com)
Date: 04/29/04 

Date: Thu, 29 Apr 2004 00:54:54 GMT

Check out : http://blogs.msdn.com/shawnfa/archive/2003/06/26/57026.aspx

You're write ... using caspol -s off is a very bad idea.

-Shawn
http://blogs.msdn.com/shawnfa 

-- 
This posting is provided "AS IS" with no warranties, and confers no rights.
Note:  For the benefit of the community-at-large, all responses to this message are best directed to the newsgroup/thread from which they 
originated.  
--------------------
>From: rethna_24@yahoo.com
>Newsgroups: microsoft.public.dotnet.security
>Subject: IE hosting  and security
>Date: 28 Apr 2004 12:44:11 -0700
>Organization: http://groups.google.com
>Lines: 7
>Message-ID: <8aeae69a.0404281144.31f97cd7@posting.google.com>
>NNTP-Posting-Host: 192.76.82.90
>Content-Type: text/plain; charset=ISO-8859-1
>Content-Transfer-Encoding: 8bit
>X-Trace: posting.google.com 1083181451 12322 127.0.0.1 (28 Apr 2004 19:44:11 GMT)
>X-Complaints-To: groups-abuse@google.com
>NNTP-Posting-Date: Wed, 28 Apr 2004 19:44:11 +0000 (UTC)
>Path: cpmsftngxa10.phx.gbl!TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfeed00.sul.t-online.de!t-online.de!news.glorb.com!
postnews1.google.com!not-for-mail
>Xref: cpmsftngxa10.phx.gbl microsoft.public.dotnet.security:5883
>X-Tomcat-NG: microsoft.public.dotnet.security
>
>I am using property grid in my usercontrol and hosting it in IE and
>using the strong name and switched of the security policy using caspol
>-s off.It works fine.
>
>But I don't want to completlty switch of security policy..Is there a
>way sothat I can only allows this control or URL to be trusted either
>by using caspol command or programmatically can we do this ..
>

Relevant Pages

  • Re: Word 2003 with VSTO 2003 stops working when .Net Framework Beta 2 is installed
    ... policies using caspol of version 2, but it still did not work. ... Each version of CLR ... I would suggest to manually migrate Fx 1.1 security policies to Fx ...
    (microsoft.public.vsnet.vstools.office)
  • RE: Hi Richard Blewett, regarding the CAS post earlier on!
    ... Are you sure caspol can switch off this: ... Or it removes off the security policy set on the ... "Chua Wen Ching" wrote: ... > Oh i didn't know you can set off the security in CAS. ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: network share security - mscorlib
    ... My opinion has been that CASPOL takes effect on the machine it is executed ... the resulting .exe's from the network. ... when I did try I found I had security problems in both areas. ... In Internet Explorer, ...
    (microsoft.public.dotnet.security)
  • RE: deploying app with existing COM
    ... use a SCRUN.DLL(a common com dll) to do some job, ... get exception. ... To isolate if the problem is caused by the CLR security check or underlying ... we can try to use the caspol tool to shut down the clr ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: Role-based-Security... just switch it off
    ... Users with administrative privileges can do everything to your system or your application. ... generic user, define roles and a generic principal during startup of ... But if I open a command line and type "caspol -security off" everybody ... What is an elegant way to make sure, that my security policies cannot ...
    (microsoft.public.dotnet.security)