{"action":"created","issue":{"url":"https://api.github.com/repos/dotnet/roslyn/issues/29525","repository_url":"https://api.github.com/repos/dotnet/roslyn","labels_url":"https://api.github.com/repos/dotnet/roslyn/issues/29525/labels{/name}","comments_url":"https://api.github.com/repos/dotnet/roslyn/issues/29525/comments","events_url":"https://api.github.com/repos/dotnet/roslyn/issues/29525/events","html_url":"https://github.com/dotnet/roslyn/issues/29525","id":354133187,"node_id":"MDU6SXNzdWUzNTQxMzMxODc=","number":29525,"title":"Roslyn demands unrestricted permissions to everything","user":{"login":"ekolis","id":2612506,"node_id":"MDQ6VXNlcjI2MTI1MDY=","avatar_url":"https://avatars0.githubusercontent.com/u/2612506?v=4","gravatar_id":"","url":"https://api.github.com/users/ekolis","html_url":"https://github.com/ekolis","followers_url":"https://api.github.com/users/ekolis/followers","following_url":"https://api.github.com/users/ekolis/following{/other_user}","gists_url":"https://api.github.com/users/ekolis/gists{/gist_id}","starred_url":"https://api.github.com/users/ekolis/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ekolis/subscriptions","organizations_url":"https://api.github.com/users/ekolis/orgs","repos_url":"https://api.github.com/users/ekolis/repos","events_url":"https://api.github.com/users/ekolis/events{/privacy}","received_events_url":"https://api.github.com/users/ekolis/received_events","type":"User","site_admin":false},"labels":[{"id":165001075,"node_id":"MDU6TGFiZWwxNjUwMDEwNzU=","url":"https://api.github.com/repos/dotnet/roslyn/labels/Resolution-Won't%20Fix","name":"Resolution-Won't Fix","color":"cccccc","default":false}],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":2,"created_at":"2018-08-26T22:07:44Z","updated_at":"2018-08-27T19:45:21Z","closed_at":"2018-08-27T18:30:22Z","author_association":"NONE","body":"**Version Used**: \r\n2.9.0\r\n\r\n**Steps to Reproduce**:\r\n\r\n1. Call Roslyn from an AppDomain where the permissions are restricted to, say, Internet zone.\r\n\r\n**Expected Behavior**:\r\nScripts run and only crash if they call on code that requires elevated permissions such as file I/O.\r\n\r\n**Actual Behavior**:\r\nRoslyn crashes immediately demanding unrestricted permissions to everything: this is the permissions that the SecurityException says it is demanding:\r\n\r\n<PermissionSet class=\"System.Security.PermissionSet\"version=\"1\"Unrestricted=\"true\"/>\r\n\r\nUnless I'm missing something here, this make Roslyn completely unusable for scenarios where potentially untrustworthy code could be executed, e.g. plugin architectures or game modding.\r\n\r\n[RoslynClassLibrary.zip](https://github.com/dotnet/roslyn/files/2321949/RoslynClassLibrary.zip)"},"comment":{"url":"https://api.github.com/repos/dotnet/roslyn/issues/comments/416345007","html_url":"https://github.com/dotnet/roslyn/issues/29525#issuecomment-416345007","issue_url":"https://api.github.com/repos/dotnet/roslyn/issues/29525","id":416345007,"node_id":"MDEyOklzc3VlQ29tbWVudDQxNjM0NTAwNw==","user":{"login":"tmat","id":41759,"node_id":"MDQ6VXNlcjQxNzU5","avatar_url":"https://avatars0.githubusercontent.com/u/41759?v=4","gravatar_id":"","url":"https://api.github.com/users/tmat","html_url":"https://github.com/tmat","followers_url":"https://api.github.com/users/tmat/followers","following_url":"https://api.github.com/users/tmat/following{/other_user}","gists_url":"https://api.github.com/users/tmat/gists{/gist_id}","starred_url":"https://api.github.com/users/tmat/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tmat/subscriptions","organizations_url":"https://api.github.com/users/tmat/orgs","repos_url":"https://api.github.com/users/tmat/repos","events_url":"https://api.github.com/users/tmat/events{/privacy}","received_events_url":"https://api.github.com/users/tmat/received_events","type":"User","site_admin":false},"created_at":"2018-08-27T19:45:21Z","updated_at":"2018-08-27T19:45:21Z","author_association":"MEMBER","body":"See https://docs.microsoft.com/en-us/windows/desktop/procthread/process-security-and-access-rights"}}
{"actor":{"display_login":"tmat"}}