Was this page helpful?
Your feedback about this content is important. Let us know what you think.
Additional feedback?
1500 characters remaining
XmlSecureResolver Constructor (XmlResolver, PermissionSet)

XmlSecureResolver Constructor (XmlResolver, PermissionSet)

Initializes a new instance of the XmlSecureResolver class with the XmlResolver and PermissionSet specified.

Namespace:  System.Xml
Assembly:  System.Xml (in System.Xml.dll)

public XmlSecureResolver(
	XmlResolver resolver,
	PermissionSet permissionSet


Type: System.Xml.XmlResolver

The XML resolver that is wrapped by the XmlSecureResolver.

Type: System.Security.PermissionSet

The permission set to apply to the underlying XmlResolver. The XmlSecureResolver calls the PermissionSet.PermitOnly method on the permission set before calling the GetEntity method on the underlying XML resolver.

The following example constructs an XmlSecureResolver object by using a customized permission set.

public static Object GetFile (String fileURL, XmlResolver resolver) {

  // Generate the default PermissionSet using the file URL.
  Evidence evidence = XmlSecureResolver.CreateEvidenceForUrl(fileURL);
  PermissionSet myPermissions = SecurityManager.ResolvePolicy(evidence);

  // Modify the PermissionSet to only allow access to http://www.contoso.com. 
  // Create a WebPermission which only allows access to http://www.contoso.com.
  WebPermission myWebPermission = new WebPermission(NetworkAccess.Connect, "http://www.contoso.com");
  // Replace the existing WebPermission in myPermissions with the updated WebPermission.

  // Use the modified PermissionSet to construct the XmlSecureResolver.
  XmlSecureResolver sResolver = new XmlSecureResolver(resolver, myPermissions);

  // Get the object.
  Uri fullUri = sResolver.ResolveUri(null, fileURL);
  return sResolver.GetEntity(fullUri, null, null);

.NET Framework

Supported in: 4.6, 4.5, 4, 3.5, 3.0, 2.0, 1.1

.NET Framework Client Profile

Supported in: 4, 3.5 SP1
© 2015 Microsoft