Comments for David DeWinter http://blogs.rev-net.com/ddewinter A Developer's Melting Pot: LINQ to SQL, Entity Framework, .NET Security... Mon, 23 Aug 2010 19:55:42 +0000 hourly 1 http://wordpress.org/?v=3.0.1 Comment on Hosting Conditional APTCA Assemblies – #9 by David DeWinter http://blogs.rev-net.com/ddewinter/2009/05/27/hosting-conditional-aptca-assemblies/comment-page-1/#comment-32984 David DeWinter Mon, 23 Aug 2010 19:55:42 +0000 http://blogs.rev-net.com/ddewinter/2009/05/27/hosting-conditional-aptca-assemblies/#comment-32984 j3nonk, this is the response I received from a member of the ASP.NET team: For Url encoding they will have to switch to System.Uri. Sidenote: for HTML encoding/decoding try System.Net.WebUtility. WebUtility contains the HTML encoding/decoding routines from ASP.NET. j3nonk, this is the response I received from a member of the ASP.NET team:

For Url encoding they will have to switch to System.Uri.

Sidenote: for HTML encoding/decoding try System.Net.WebUtility. WebUtility contains the HTML encoding/decoding routines from ASP.NET.

]]> Comment on Hosting Conditional APTCA Assemblies – #9 by j3nonk http://blogs.rev-net.com/ddewinter/2009/05/27/hosting-conditional-aptca-assemblies/comment-page-1/#comment-32938 j3nonk Mon, 23 Aug 2010 02:12:21 +0000 http://blogs.rev-net.com/ddewinter/2009/05/27/hosting-conditional-aptca-assemblies/#comment-32938 Hi David, Thanks for the response. I use methods inside HttpUtility class. Actually I could just replace the methods that I use such as UrlEncode, UrlDecode etc. (not too difficult but a lot of work :D) I just wonder why Microsoft change the behaviour. Perhaps want to seperate between the web and non web application? because I saw that if the Target is .NET Framework 4 Client Profile, I can't find the System.web.dll if you try to add reference to the project. Is there a security issue if a non web application use System.Web.dll? I don't know :P Thanks, j3nonk. Hi David,

Thanks for the response. I use methods inside HttpUtility class. Actually I could just replace the methods that I use such as UrlEncode, UrlDecode etc. (not too difficult but a lot of work :D )
I just wonder why Microsoft change the behaviour. Perhaps want to seperate between the web and non web application? because I saw that if the Target is .NET Framework 4 Client Profile, I can’t find the System.web.dll if you try to add reference to the project. Is there a security issue if a non web application use System.Web.dll? I don’t know :P

Thanks,
j3nonk.

]]> Comment on Hosting Conditional APTCA Assemblies – #9 by David DeWinter http://blogs.rev-net.com/ddewinter/2009/05/27/hosting-conditional-aptca-assemblies/comment-page-1/#comment-32927 David DeWinter Sun, 22 Aug 2010 23:16:02 +0000 http://blogs.rev-net.com/ddewinter/2009/05/27/hosting-conditional-aptca-assemblies/#comment-32927 Hi j3nonk, if you don't control the host then there's nothing you can do to be able to use System.Web today. What classes from System.Web do you use in an XBAP application though? Hi j3nonk, if you don’t control the host then there’s nothing you can do to be able to use System.Web today. What classes from System.Web do you use in an XBAP application though?

]]> Comment on Asserting for Permissions in .NET 4 – #18 by David DeWinter http://blogs.rev-net.com/ddewinter/2009/06/25/asserting-for-permissions-in-net-4/comment-page-1/#comment-32926 David DeWinter Sun, 22 Aug 2010 23:14:21 +0000 http://blogs.rev-net.com/ddewinter/2009/06/25/asserting-for-permissions-in-net-4/#comment-32926 Hi Colin, I know the security model is complicated. Unfortunately splitting the model into slices and examining each slice can sometimes lose how everything works together to create the big picture. As far as I can tell, everything you've described should make this work. Is the assembly that contains the Helper class signed with a strong name key? You can also check if your assembly is being registered correctly in the fully trusted assemblies list by checking AppDomain.CurrentDomain.SetupInformation.ApplicationTrust.FullTrustAssemblies for the strong name of the Helper assembly. Hope that helps--I'll try to be a little more punctual with a reply if you respond. Hi Colin, I know the security model is complicated. Unfortunately splitting the model into slices and examining each slice can sometimes lose how everything works together to create the big picture.

As far as I can tell, everything you’ve described should make this work. Is the assembly that contains the Helper class signed with a strong name key? You can also check if your assembly is being registered correctly in the fully trusted assemblies list by checking AppDomain.CurrentDomain.SetupInformation.ApplicationTrust.FullTrustAssemblies for the strong name of the Helper assembly. Hope that helps–I’ll try to be a little more punctual with a reply if you respond.

]]> Comment on Hosting Conditional APTCA Assemblies – #9 by j3nonk http://blogs.rev-net.com/ddewinter/2009/05/27/hosting-conditional-aptca-assemblies/comment-page-1/#comment-32601 j3nonk Thu, 19 Aug 2010 07:48:33 +0000 http://blogs.rev-net.com/ddewinter/2009/05/27/hosting-conditional-aptca-assemblies/#comment-32601 Hi David, Nice article.. ;) I have the same problem, that is using objects inside System.Web.dll but the host is an XBAP Application (Partial Trust). Do you have a workaround how to solve this? without having to remove objects of System.Web assembly in my codes? Probably, somehow we can register the System.Web assembly into Current Domain (AppDomain.CurrentDomain.SetupInformation.PartialTrustVisibleAssemblies)? Or do you have other idea? Thanks, j3nonk. Hi David,

Nice article.. ;)
I have the same problem, that is using objects inside System.Web.dll but the host is an XBAP Application (Partial Trust).
Do you have a workaround how to solve this? without having to remove objects of System.Web assembly in my codes?
Probably, somehow we can register the System.Web assembly into Current Domain (AppDomain.CurrentDomain.SetupInformation.PartialTrustVisibleAssemblies)?
Or do you have other idea?

Thanks,
j3nonk.

]]> Comment on ASP.NET Event Validation by Abhilash http://blogs.rev-net.com/ddewinter/2007/11/24/aspnet-event-validation/comment-page-1/#comment-31411 Abhilash Fri, 23 Jul 2010 19:49:36 +0000 http://dev.rev-net.com/blog/ddewinter/?p=22#comment-31411 Thats a nice piece of information. :D Thats a nice piece of information.
:D

]]> Comment on Asserting for Permissions in .NET 4 – #18 by Colin Bowern http://blogs.rev-net.com/ddewinter/2009/06/25/asserting-for-permissions-in-net-4/comment-page-1/#comment-31398 Colin Bowern Fri, 23 Jul 2010 07:22:37 +0000 http://blogs.rev-net.com/ddewinter/2009/06/25/asserting-for-permissions-in-net-4/#comment-31398 This isn't making a lot of sense for those of us who don't frequently touch CAS. I'm trying the above in ASP.NET v4 and it's throwing an InvalidOperationException: Cannot perform CAS Asserts in Security Transparent methods. I get that ASP.NET v4 under medium trust runs in a security transparent manner. I thought by adding my class library to the fullTrustAssemblies element that I would be able to run the full trust code. What am I missing: [assembly: AllowPartiallyTrustedCallers] namespace HelperLib { public static class Helper { public static string CreateFile() { return DangerousWork(); } [SecuritySafeCritical] [PermissionSet(SecurityAction.Assert, Unrestricted=true)] private static string DangerousWork() { string data = File.ReadAllText("c:\\testfile.txt"); return data; } } } This isn’t making a lot of sense for those of us who don’t frequently touch CAS. I’m trying the above in ASP.NET v4 and it’s throwing an InvalidOperationException: Cannot perform CAS Asserts in Security Transparent methods. I get that ASP.NET v4 under medium trust runs in a security transparent manner. I thought by adding my class library to the fullTrustAssemblies element that I would be able to run the full trust code. What am I missing:

[assembly: AllowPartiallyTrustedCallers]

namespace HelperLib
{
public static class Helper
{
public static string CreateFile()
{
return DangerousWork();
}

[SecuritySafeCritical]
[PermissionSet(SecurityAction.Assert, Unrestricted=true)]
private static string DangerousWork()
{
string data = File.ReadAllText(“c:\\testfile.txt”);

return data;

}
}
}

]]> Comment on LINQ to SQL: Updating Entities by Alex http://blogs.rev-net.com/ddewinter/2009/04/07/linq-to-sql-updating-entities/comment-page-1/#comment-31380 Alex Thu, 22 Jul 2010 09:17:13 +0000 http://blogs.rev-net.com/ddewinter/2009/04/07/linq-to-sql-updating-entities/#comment-31380 It is a very good article. It really helped my with my concurrency errors. Thanks! It is a very good article. It really helped my with my concurrency errors.

Thanks!

]]> Comment on Entity Framework Stored Procedure Generation by Richard Collette http://blogs.rev-net.com/ddewinter/2008/04/26/entity-framework-stored-procedure-generation/comment-page-1/#comment-31044 Richard Collette Sun, 11 Jul 2010 20:58:05 +0000 http://blogs.rev-net.com/ddewinter/index.php/2008/04/26/entity-framework-stored-procedure-generation/#comment-31044 It seems like the next logical thing to make this do, if possible, is to get the stored procedures into a database project so that you can take advantage of deployment packaging. The "import sql" option can be automated using sql server management objects http://msdn.microsoft.com/en-us/library/ms162169.aspx It seems like the next logical thing to make this do, if possible, is to get the stored procedures into a database project so that you can take advantage of deployment packaging. The “import sql” option can be automated using sql server management objects http://msdn.microsoft.com/en-us/library/ms162169.aspx

]]> Comment on Dynamic Menu Commands in Visual Studio Packages – Part 2 by Andy http://blogs.rev-net.com/ddewinter/2008/03/22/dynamic-menu-commands-in-visual-studio-packages-part-2/comment-page-1/#comment-30880 Andy Wed, 07 Jul 2010 16:13:05 +0000 http://blogs.rev-net.com/ddewinter/?p=72#comment-30880 Hello, Great post, however I wanted to go 1 step further, i.e. if I select multiple files in VS solution explorer context menu, the following line returns null 'value': hierarchy.GetProperty(projectItemId, (int)__VSHPROPID.VSHPROPID_Name, out value); If only 1 file is selected then I get the name of that file using "value.ToString()" Any suggestion on how to get names of multiple files selected? Many thanks ! Hello, Great post, however I wanted to go 1 step further, i.e. if I select multiple files in VS solution explorer context menu, the following line returns null ‘value’:
hierarchy.GetProperty(projectItemId, (int)__VSHPROPID.VSHPROPID_Name, out value);
If only 1 file is selected then I get the name of that file using “value.ToString()”

Any suggestion on how to get names of multiple files selected?

Many thanks !

]]>