As a test engineer on the Entity Framework team, I’ve observed many different areas to test in order to deliver a quality product. One of these areas is the story of how assemblies in the Entity Framework work in partial trust. Building this story as a product team forces us to make decisions on how we operate in certain scenarios, but it also forces us to know a lot about the scenarios that our customers envision for using the Entity Framework.

Over the past few months I have learned a lot about CLR security in order to discover these scenarios, and I want to share what I’ve learned as a series of tips in the hopes that it can help application developers learn more about security in .NET and help other framework and library developers build better software. I have a set of about 25 tips now, but I am more than happy to add more based on your feedback! Enjoy!