1. 08 5月, 2023 1 次提交
  2. 05 5月, 2023 1 次提交
    • D
      Updated pipeline to install .NET 8 Preview 3 after build (#7773) · 17b811f6
      Dipesh Kumar 提交于
      * Updated pipeline to install .NET 8 Preview 3
      
      * Added programFiles variables to the pipeline
      
      * Changed net 8 version
      
      * Updated install .net core task
      
      * Updated dotnet core installation task
      
      * Changed .NET Core runtime install version
      
      * Changed windowsdesktop version in pipeline
      17b811f6
  3. 28 4月, 2023 1 次提交
  4. 18 3月, 2023 1 次提交
  5. 16 3月, 2023 1 次提交
  6. 20 2月, 2023 1 次提交
  7. 21 12月, 2022 1 次提交
  8. 11 10月, 2022 1 次提交
    • A
      Fix pipeline errors (#7183) · bcb8b70d
      Ashish Kumar Singh 提交于
      * fix pipeline errors
      
      * Not running DRTs on arm64
      
      * Fix the brackets
      
      * update and operator brackets.
      
      * Fix variables in the template
      
      * update variable usage
      
      * change to template variables
      
      * update variable usage
      
      * diable builds temporarily
      
      * disable unwanted runs
      
      * uncomment build and replace step
      
      * use block conditional
      
      * check with conditional
      
      * Fix arm64 running drts
      bcb8b70d
  9. 04 10月, 2022 1 次提交
  10. 03 10月, 2022 1 次提交
    • A
      Run DRTs. (#7135) · 2db580f9
      Ashish Kumar Singh 提交于
      * reinstantiate running of drts
      
      * remove unnecessary step
      
      * download latest build from pipeline
      
      * use artifacts from specific run arcade builds nothing
      2db580f9
  11. 19 9月, 2022 1 次提交
  12. 08 9月, 2022 1 次提交
    • D
      [main] Update dependencies from dotnet/arcade (#7010) · efc269ad
      dotnet-maestro[bot] 提交于
      [main] Update dependencies from dotnet/arcade
      
      
       - Use DownloadBuildArtifacts@0
      
       - Fix specific build ID
      
       - Update pipeline.yml
      
       - Update pipeline.yml
      
       - Update pipeline.yml
      
       - Update pipeline.yml
      
       - Update pipeline.yml
      
       - Update pipeline.yml
      
       - Update pipeline.yml
      
       - Update pipeline.yml
      
       - Update pipeline.yml
      
       - Update pipeline.yml
      
       - Update pipeline.yml
      
       - Update pipeline.yml
      
       - Update pipeline.yml
      efc269ad
  13. 06 9月, 2022 2 次提交
  14. 12 8月, 2022 1 次提交
  15. 03 8月, 2022 1 次提交
  16. 29 7月, 2022 1 次提交
  17. 26 4月, 2022 1 次提交
  18. 13 12月, 2021 1 次提交
  19. 11 12月, 2021 1 次提交
    • D
      [main] Update dependencies from dotnet/arcade (#5733) · 82383246
      dotnet-maestro[bot] 提交于
      [main] Update dependencies from dotnet/arcade
      
      
       - Update image used; it seems the GA 6.0.100 .NET Core SDK wants VS 2022 for WPF's purposes.
      
       - Temporarily change to Int pools for verification
      
       - Revert "Temporarily change to Int pools for verification"
      
      This reverts commit 266cd39779e3f336854453b37fffae8f9be5f037.
      
       - Change platform Toolset to 143
      
       - Merge branch 'darc-main-83d344b6-2da4-4cb4-bc09-b0c292dfa886' of https://github.com/dotnet/wpf into darc-main-83d344b6-2da4-4cb4-bc09-b0c292dfa886
      
       - Update VCRuntime  VC version
      
       - Temporarily change pool to internal
      
       - Change toolsversion to 17
      
       - temporarily remove atl lib dependency
      82383246
  20. 05 10月, 2021 1 次提交
  21. 09 7月, 2021 1 次提交
  22. 19 6月, 2021 1 次提交
  23. 17 6月, 2021 1 次提交
  24. 18 3月, 2021 1 次提交
  25. 22 1月, 2021 1 次提交
  26. 17 7月, 2020 1 次提交
  27. 30 4月, 2020 1 次提交
  28. 08 2月, 2020 3 次提交
  29. 27 11月, 2019 1 次提交
    • A
      Merged PR 4378: [.Net Core 3.1] MSRC 54179, 54120: Reflecting into internal... · e26f6140
      Arpit Mathur 提交于
      Merged PR 4378: [.Net Core 3.1] MSRC 54179, 54120: Reflecting into internal overloads of XamlReader.Load to use RestrictiveXamlXmlReader
      
      Bugs:
      
      - Bug [1006083](https://devdiv.visualstudio.com/DevDiv/_workitems/edit/1006083): MSRC 54120: XAMLReader.Load used by `GetFixedDocumentSequence` method which could lead to code execution [.Net Core 3.1]
      - Bug [1006086](https://devdiv.visualstudio.com/DevDiv/_workitems/edit/1006086): MSRC 54179: Code Execution using Malicious Annotation Files for Sticky Notes in WPF apps [.Net Core 3.1]
      
      ###Description
      
      Loose xaml can contain executable payload e.g. `ObjectDataProvider`. This Xaml can be included as part of `XpsDocument`s or base-64 encoded and then included in `StickyNote`s' annotation xml files.
      
      In WPF, we were allowing `XpsDocument`s and `StickyNote`s' annotation xml files to be loaded freely via `XamlReader.Load`.
      
      This exposes an attack vector - when a user downloads an XPS file from the internet for *viewing*, they could end up executing untrusted code.
      
      The fix is to identify known dangerous types and limit them from being deserialized during XAML loading.
      
      In order to accomplish this, we add new _non-public_ overloads to the `XamlReader.Load` method to enable the use of `RestrictiveXamlXmlReader`. `RestrictiveXamlXmlReader` restricts known dangerous types from being loaded while deserializing xaml.
      
      We then call `XamlReader.Load` via `XamlReaderProxy`, which is an adapter for `XamlReader` type and uses reflection to access `XamlReader.Load`. Reflection is used to avoid adding additional public surface area to `XamlReader` in servicing.
      
      Small changes are made to `TextRange` as well since the call-site for the `StickyNote`s case was through a call to `TextRange` which in turn calls into `XamlReader.Load`.
      
      ### Customer Impact
      
      Customers would be protected from opening potentially-compromised XPS documents and stickynotes annotation xml files.
      
      ### Regression
      No. This security issue was reported by an external party.
      
      ### Risk - Low
      
      - This change only affects loading XPS documents and loading stickynotes annotation data.
      - The change has been tested well internally.
        - We ran regression tests to ensure nothing else is inadvertently broken.
        - Validated against POC to ensure that the fix works as intended.
      
      In .NET Framework, we are introducing a quirk to give developers/cusotmers the option of going back to the old (i.e., unsecure) behavior where deserializing dangerous types like `ObjectDataProvider` will be allowed. In .NET Core, no quirks are being provided - we do not believe that this is a scenario that should be supported for compatibility in a relatively new platform.
      e26f6140
  30. 20 11月, 2019 2 次提交
  31. 08 8月, 2019 1 次提交
  32. 19 7月, 2019 1 次提交
  33. 29 6月, 2019 4 次提交