In my C # MVC project, users have access to Views modifications to customize their page views (they can edit cshtml views and use the Razor engine).
How can I limit the browsing mechanism to access to some namespaces, for example System.IO, System.Sql?
I planned to remove "System.XXX" in markup from users, but some namespaces are imported by default, for example System.IO. therefore, users can still run some dangerous commands, such as File.Delete ...
So, how can I limit user access to simple CSHTML editing, and some namespaces are not all namespaces?
source
share