Resolved security protections of scripts in asset bundles

[ScottyG]

Hey Punks!

I've just come across the ability to import and compile classes runtime (Unity 3D, C#)

Given that I'm importing 3rd party scripts (for whatever reason), e.g. Unity - Manual: Including scripts in AssetBundles

The Unity application’s sandbox and Android user permissions protect the user, but what can be done to protect my application?

What kind of things could a funky hacker punk do with this facility?
And what would help manage this risk?
Could this be made secure?

Many thanks!

 

[ScottyG]

Found it!

Security Considerations for Reflection - .NET Framework

Learn about security considerations for reflection in .NET. Getting information about types and members is allowed, but accessing members has restrictions.

learn.microsoft.com