A managed code api makes it easy to develop , deploy , and manage extensions to the report server 托管代碼api簡(jiǎn)化了報(bào)表服務(wù)器擴(kuò)展插件的開(kāi)發(fā)、部署和管理。使用
A common attack passes unexpected parameters to exposed unmanaged code api methods in an attempt to cause them to operate out of specification 普通攻擊向已公開(kāi)的非托管代碼api方法傳遞意外參數(shù),試圖使它們超越規(guī)范而運(yùn)行。
Thus , even if the unmanaged code api is functionally safe after necessary demands for partially trusted callers , managed code must also check parameter validity exhaustively to ensure that no unintended calls are possible from malicious code using the managed code wrapper layer 這樣,即使非托管代碼api對(duì)部分受信任的調(diào)用方來(lái)說(shuō)在功能上是安全的(在應(yīng)用必需的請(qǐng)求之后) ,托管代碼也必須徹底檢查參數(shù)有效性,以確保惡意代碼不能使用托管代碼包裝層執(zhí)行非預(yù)期的調(diào)用。