如何将 MEF（托管扩展性框架）配置为仅加载签名程序集

Question

I have an application that uses MEF to dynamically load assemblies. However, currently, it is loading my assemblies whether they are signed or not. I want to prevent others from dropping in their own assemblies and having my application load them and run them. I'd like MEF to only load assemblies that have been signed by me.

Can this be done? If so, how?

Thanks

Answer 1

Yes. Implement a filtering catalog that checks if the public key of the assembly is the one that you specify. )

Answer 2

Here's a blog post that shows exactly how to do this: How To Control Who Can Write Extensions For Your MEF Application