Running embedded DLR scripts in a minimal security context

Question

I need to point in the right direction. I have included the Iron Python script host in a simple C # application, but now I need to know the best practices for blocking security for a user-created IronPython or IronRuby script.

In particular, what are the strategies for preventing the import of libraries and is there no way in .NET to run a block of code or thread in a different security context, for example, to prevent access to the file system? Also, can this context be assigned an inline level or role, rather than the actual user?

Thank!

Answer 1

Evidence API