Plugin Engine

From World Wind Wiki

(Difference between revisions)
Jump to: navigation, search
Revision as of 13:39, 18 June 2005 (edit)
Mashiharu (Talk | contribs)
(External links)
← Previous diff
Current revision (10:58, 30 January 2018) (edit) (undo)
Bull (Talk | contribs)
m (Reverted edits by Monday (Talk); changed back to last version by 209.44.140.22)
 
(9 intermediate revisions not shown.)
Line 1: Line 1:
-A C#/VB/JScript.NET '''Plugin Engine''' has been added to World Wind (still unreleased, only available from [[CVS]]).+A C#/VB/JScript.NET '''Plugin Engine''' was added to World Wind in version 1.3.2.
==Features== ==Features==
Line 27: Line 27:
*Security: The script could wipe out the hard drive or worse. But with a script at least the user can verify the intentions by looking at the source. Even current add-ons (layers) are often .exe installers giving the user no way of identifying evil code. *Security: The script could wipe out the hard drive or worse. But with a script at least the user can verify the intentions by looking at the source. Even current add-ons (layers) are often .exe installers giving the user no way of identifying evil code.
*To unload a script's assembly from memory completely, WW needs a restarted (there are workarounds (appdomains)) *To unload a script's assembly from memory completely, WW needs a restarted (there are workarounds (appdomains))
-*With no nailed down limited interface into WW the script could stop working on a new version of WW. +*With no nailed down limited interface into WW the script could stop working on a new version of WW.
 + 
 +==Problems==
 +*Serializing generic lists (List<SomeClass>) won't work; use a normal array or an ArrayList instead
==Security Lockdown Fix== ==Security Lockdown Fix==
Line 52: Line 55:
==External links== ==External links==
-*Sample scripts in [http://www.mashiharu.com Mashi's space]. 
-[[Category:Plugins]]+[[Category:Plugin development]]
-[[Category:Dev]]+

Current revision

A C#/VB/JScript.NET Plugin Engine was added to World Wind in version 1.3.2.

Contents

[edit] Features

  • Dynamic compilation and execution of script code written in the following languages:
    • C#
    • VB.NET
    • JSCript.net
  • Load plugins from precompiled .dll files
  • Full access to World Wind internals (same as internal code)
  • Runs at full speed (compilation on load)

[edit] Engine logic

When World Wind starts the following steps are performed:

  • The PluginCompiler scans bin\Plugins directory and the 1st level subdirectories of the plugin directory for files ending in any of the supported file extensions.
  • When it finds one it tries to compile the source (to memory) with references to the same assemblies as the app has referenced.
  • It then searches the compiled assembly for an implementation of Plugin.

[edit] Benefits

  • Since the compiler for C#,VB and JSCript comes with the .Net Framework no additional third party library is required.
    • For other languages (like J#) an install will be needed, and unfortunately I haven't found an easy way of enumerating all available compilers (before .Net 2.0)
  • Very fast on-the-fly compilation of the scripts.
  • Scripts executes with same speed as a precompiled assembly.
  • Debuggable inside World Wind project (World Wind in debug build loads internal plugins)
  • Custom dlls may be dynamically loaded

[edit] Drawbacks

  • Security: The script could wipe out the hard drive or worse. But with a script at least the user can verify the intentions by looking at the source. Even current add-ons (layers) are often .exe installers giving the user no way of identifying evil code.
  • To unload a script's assembly from memory completely, WW needs a restarted (there are workarounds (appdomains))
  • With no nailed down limited interface into WW the script could stop working on a new version of WW.

[edit] Problems

  • Serializing generic lists (List<SomeClass>) won't work; use a normal array or an ArrayList instead

[edit] Security Lockdown Fix

Following this example we should be able to lockdown FileIO to the AppDir

public static string ReadFile(string filename)
{
  string appDir = Directory.GetCurrentDirectory();
  FileIOPermission f = new FileIOPermission(PermissionState.None);
  f.SetPathList(FileIOPermissionAccess.Read, appDir);
  f.SetPathList(FileIOPermissionAccess.PathDiscovery, appDir);
  f.PermitOnly(); 

  // Use Path.GetFilePath() to canonicalize the file name
  // Use FileStream.OpenRead to open the file
  // Use FileStream.Read to access and return the data
}

From Code Access Security in Practice - MSDN

[edit] Code Translator

C#<->VB [1] So no one can complain about languages. :)

[edit] External links

Personal tools