SecureCSharpEval 25.2.27

SecureCSharpEval

SecureCSharpEval is a secure and sandboxed C# script execution library that allows users to evaluate C# code dynamically while ensuring safety and preventing malicious activities.

Features

• Execute C# scripts dynamically with controlled parameters.
• Prevents unsafe operations such as file access, process execution, and system manipulation.
• Configurable execution timeout and memory limits.
• Optimized for .NET – Fully compatible with .NET 6/7/8/9.
• Optional shell execution support (DISABLED by default for security).

Installation

You can install this library via NuGet Package Manager:

Install-Package SecureCSharpEval

Usage

• Using Conditional Statements, Loops and the new method

class Program
{
    private static string checkPrime = @"
    static bool IsPrime(int n)
    {
        if (n < 2) return false;
        for (int i = 2; i * i <= n; i++)
        {
            if (n % i == 0) return false;
        }
        return true;
    };
    return IsPrime(number);
    ";
    static async Task Main(string[] args)
    {
        var n = 4;
        var evaluator = new ScriptEvaluator();

        Console.WriteLine("Before: {0}",n);

        var parameters = new Dictionary<string, object>
        {
            { "number", n },
        };
        
        var result = await evaluator.EvaluateAsync(checkPrime, parameters);

        if (result.HasError)
        {
            Console.WriteLine($"Error: {result.ErrorMessage}");
        }
        else
        {
            Console.WriteLine($"Is Prime: {result.Result}");
            Console.WriteLine($"Execution Time: {result.ExecutionTimeMs}ms");
        }

        Console.ReadKey();
    }
}

Configuring Execution Limits

eval.ExecutionTimeoutMs = 3000;  // Increase timeout to 3 seconds
eval.MaxMemoryUsageMb = 100;     // Set max memory usage to 100 MB
eval.AllowShellExecution = true; // Enable shell execution (use with caution)

Security Considerations

• By default, execution is sandboxed and restricted from running system commands.
• If enabling AllowShellExecution, ensure proper input validation.
• Avoid allowing user-provided scripts without proper review.

Contact

For any questions, feel free to contact me or create an issue in the repository.