How to provide isolation?
问题 I have a need to allow my users to execute .NET code that they provide on my server. I know security is a big concern, but it has to be done that way. Currently, I run my users' code under a limited Windows account. But, I am worried that .NET framework provides many classes that, if used maliciously, can harm the server -- classes under the Reflection namespace is one example, CodeDom is another concern. I wish there was a way to create a "lightweight virtual environment" that can run .NET