We Keep Coding

Attempt by security transparent method to access security critical type failed

I am getting below error in MVC4 application
Attempt by security transparent method 'Autofac.Integration.Mvc.RegistrationExtensions.RegisterControllers(Autofac.Cont ainerBuilder, System.Reflection.Assembly[])' to access security critical type 'Autofac.Builder.IRegistrationBuilder`3<System.Object,Autofac.Features.Scanning.ScanningActivatorData,Autofac.Builder.DynamicRegistrationStyle>' failed.
Assembly 'Autofac.Integration.Mvc, Version=3.0.0.0, Culture=neutral,
PublicKeyToken=17863af14b0044da' is marked with the
AllowPartiallyTrustedCallersAttribute, and uses the level 2 security
transparency model. Level 2 transparency causes all methods in
AllowPartiallyTrustedCallers assemblies to become security transparent by
default, which may be the cause of this exception.
I tried different solutions given in below links but none of them work for me
Attempt by security transparent method to access security critical method failed
Attempt by security transparent method xxx to access security critical yy and
https://forums.asp.net/t/1939805.aspx
Please help

I am pretty sure this is the version issue. I installed Autofac.WebApi by mistake, the version of Autofac was automatically 3.x.x. Then the issue came. After that I realized I had to use Autofac.WebApi2 instead of Autofac.WebApi. I installed, Autofac version went up to 4.6.2, then booom the issue was solved.
Hope it helps

I replaced Autofac 4.0.0 with version Autofac 3.5.0 and Autofac.Integration.Mvc to 3.0.0. This resolved the problem

Cannot Apply System.Web.Extensions to PartialTrustVisibleAssemblies List

In the web.config of webforms .net 4.5 application I set the following:
<trust legacyCasModel="true" level="Full" />
because this is a Microsoft work around to overcome an bug in the asp.net Report Viewer which causes large reports to take much longer to generate than in previous .net versions (3.5 and older). Unfortunately, enabling the legacy CasModel has caused the error below. As the error suggests I have attempted many times to apply an exception in my site's web.config such as:
<system.web>
<partialTrustVisibleAssemblies>
<add assemblyName="System.Web.Extensions" version="4.0.0" publicKey="0024000004800000940000000602000000240000525341310004000001000100B5FC90E7027F67871E773A8FDE8938C81DD402BA65B9201D60593E96C492651E889CC13F1415EBB53FAC1131AE0BD333C5EE6021672D9718EA31A8AEBD0DA0072F25D87DBA6FC90FFD598ED4DA35E44C398C454307E8E33B8426143DAEC9F596836F97C8F74750E5975C64E2189F45DEF46B2A2B1247ADC3652BF5C308055DA9" />
</partialTrustVisibleAssemblies>
</system.web>
But the error still occurs. I also attempted to apply this setting to the .net 4 web.config and specify this assembly to have full trust but it still won't work. I've read a ton of documentation pertaining to this issue and I cannot locate any other way this issue maybe resolved (except to remove this assembly in my project or make other major changes to my web application). Any suggestions of how I can fix or address this issue would be greatly appreciated, Thanks.
Server Error in '/' Application.
Attempt by security transparent method 'Microsoft.ScriptManager.MSAjaxv45.PreApplicationStartCode.Start()' to access security critical method 'System.Web.UI.ScriptManager.get_ScriptResourceMapping()' failed.
Assembly 'System.Web.Extensions, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35' is a conditionally APTCA assembly which is not enabled in the current AppDomain. To enable this assembly to be used by partial trust or security transparent code, please add assembly name 'System.Web.Extensions, PublicKey=0024000004800000940000000602000000240000525341310004000001000100B5FC90E7027F67871E773A8FDE8938C81DD402BA65B9201D60593E96C492651E889CC13F1415EBB53FAC1131AE0BD333C5EE6021672D9718EA31A8AEBD0DA0072F25D87DBA6FC90FFD598ED4DA35E44C398C454307E8E33B8426143DAEC9F596836F97C8F74750E5975C64E2189F45DEF46B2A2B1247ADC3652BF5C308055DA9' to the the PartialTrustVisibleAssemblies list when creating the AppDomain.
Description: An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code.
Exception Details: System.MethodAccessException: Attempt by security transparent method 'Microsoft.ScriptManager.MSAjaxv45.PreApplicationStartCode.Start()' to access security critical method 'System.Web.UI.ScriptManager.get_ScriptResourceMapping()' failed.
Assembly 'System.Web.Extensions, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35' is a conditionally APTCA assembly which is not enabled in the current AppDomain. To enable this assembly to be used by partial trust or security transparent code, please add assembly name 'System.Web.Extensions, PublicKey=0024000004800000940000000602000000240000525341310004000001000100B5FC90E7027F67871E773A8FDE8938C81DD402BA65B9201D60593E96C492651E889CC13F1415EBB53FAC1131AE0BD333C5EE6021672D9718EA31A8AEBD0DA0072F25D87DBA6FC90FFD598ED4DA35E44C398C454307E8E33B8426143DAEC9F596836F97C8F74750E5975C64E2189F45DEF46B2A2B1247ADC3652BF5C308055DA9' to the the PartialTrustVisibleAssemblies list when creating the AppDomain.

Try removing "Microsoft.ScriptManager.MSAjax.dll" and "Microsoft.ScriptManager.WebForms.dll" from references(if not used).

#Sachin, thank you for your answer however I need those assemblies for this project so that would not resolve this issue. I resolved this issue a while ago. I think this error was occurring when attempting some authentication functions in the application. I resolved the issue by setting the report function to open in a new application pool, so that the enabling of the legacy CAS model only effects the new application pool and therefore not effecting other authentication functions in the application.

Conflicting System.Web.Http.Cors assembly in azure mobile services

Suddenly I got the following error when publishing to Azure Mobile Services.
"Error Found conflicts between different versions of the same dependent assembly 'System.Web.Http.Cors': 5.1.0.0, 5.2.2.0. Please change your project to use only one version. App.Hosting 2014-09-20 23:40:26"
I use Microsoft.AspNet.WebApi.Cors and WindowsAzure.MobileServices.Backend (1.0.348).
I have tried going through all references and I cant find any pointing at 5.2.2.0.
I have also tried upgrading to 5.2.2.0 however when doing so I get:
"Error Boot strapping failed: executing 'WebApiConfig.Register' caused an exception: 'Could not load file or assembly 'System.Web.Http.Cors, Version=5.1.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35' or one of its dependencies. The system cannot find the file specified.'. App.Hosting 2014-09-20 23:06:20"
I can not understand why I get this error and it seem to have start to occur with no apparent reason.
Any pointer is appreciated.

We are in the process of updating to the newly released ASP.NET Web API 5.2 and it looks like we missed an assembly redirect for the CORS assembly.
In a couple of days you will be able to use the full ASP.NET Web API 5.2 but the upgrade has to complete first. To fix your problem now, you should be able to just remove your own CORS assembly (assuming you are only setting the origins) and then set them using the MS_CrossDomainOrigins app setting in your local web.config as described in this blog [1], for example:
<add key="MS_CrossDomainOrigins" value="http://testhost, http://sample" />
Sorry for the inconvenience!
Henrik
[1] http://azure.microsoft.com/blog/2014/07/28/azure-mobile-services-net-updates/

Trying to include Strong Name dll's to for level 2 security transparency model

My 4.0 MVC app that renders a PDF View to screen. It all works on my dev box but generates a security violation from the host provider environment. To compensate, I added [AllowPartiallyTrustedCallers] and [SecurityCritical] attributes on controller. Only now, two of my nuget packages will not compile because they are not strong name compliant. So when I try the following steps to make them strongly named, I end up with a runtime error. Any suggestions appreciated.
Steps to strong name nuget dlls.
1) ldasm /all /out=Rotativa.il Rotativa.dll
2) sn -k Rotativa.snk
3) ilasm /dll /key=Rotativa.snk Rotativa.il
Runtime Error:
{"Attempt by security transparent method 'my_App. M v c Application. Application_Start()' to access security critical method 'System.Web.Optimization.Bundle Table.get_Bundles()' failed.\n\n Assembly 'my_App, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null' is marked with the 'Allow Partially Trusted Callers Attribute', and uses the level 2 security transparency model. Level 2 transparency causes all methods in 'Allow Partially Trusted Callers Attribute'assemblies to become security transparent by default, which may be the cause of this exception."}
Attempt by security transparent method 'my_App. M v c Application.Application_Start()' to access security critical method 'System.Web.Optimization.Bundle Table.get_Bundles()' failed.
Assembly 'my_App, Version=1.0.0.0, Culture=neutral, Public Key Token=null' is marked with the 'Allow Partially Trusted Callers Attribute', and uses the level 2 security transparency model. Level 2 transparency causes all methods in 'Allow Partially Trusted Callers' assemblies to become security transparent by default, which may be the cause of this exception.

Have you already executed the .NET Security Annotator Tool on your assembliy and its dependencies? It guides you through the steps to make it Level 2 compliant.
http://msdn.microsoft.com/en-us/library/dd997356.aspx

System.MethodAccessException: Attempt by security transparent method to access security critical method fails on all applications

Hello and thanks in advance for the help,
I know that this question or similar questions have been posted, frequently with specific regards to MVC 3 applications. However, I am getting this error message whenever I try and launch any application from within visual web developer express 2010 using a .net 4.0 target framework.
The exact error message is:
Attempt by security transparent method 'System.Runtime.Diagnostics.DiagnosticTrace..ctor(System.String, System.Guid)' to access security critical method 'System.Runtime.Diagnostics.EtwDiagnosticTrace..ctor(System.String, System.Guid)' failed`.
Assembly 'System.ServiceModel.Internals, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35' is marked with the AllowPartiallyTrustedCallersAttribute, and uses the level 2 security transparency model. Level 2 transparency causes all methods in AllowPartiallyTrustedCallers assemblies to become security transparent by default, which may be the cause of this exception.
Stack trace:
[MethodAccessException: Attempt by security transparent method 'System.Runtime.Diagnostics.DiagnosticTrace..ctor(System.String, System.Guid)' to access security critical method 'System.Runtime.Diagnostics.EtwDiagnosticTrace..ctor(System.String, System.Guid)' failed.
Assembly 'System.ServiceModel.Internals, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35' is marked with the AllowPartiallyTrustedCallersAttribute, and uses the level 2 security transparency model. Level 2 transparency causes all methods in AllowPartiallyTrustedCallers assemblies to become security transparent by default, which may be the cause of this exception.]
System.Runtime.Diagnostics.DiagnosticTrace..ctor(String traceSourceName, Guid etwProviderId) +24
System.ServiceModel.Activation.FxTrace.InitializeTracing() +90
System.ServiceModel.Activation.FxTrace.get_Trace() +84
System.ServiceModel.ServiceHostingEnvironment.EnsureInitialized() +59
System.ServiceModel.ServiceHostingEnvironment.OnEnsureInitialized(Object state) +4
System.ServiceModel.AspNetPartialTrustHelpers.PartialTrustInvoke(ContextCallback callback, Object state) +52
System.ServiceModel.ServiceHostingEnvironment.SafeEnsureInitialized() +65
System.ServiceModel.Activation.HttpModule.ProcessRequest(Object sender, EventArgs e) +58
System.Web.SyncEventExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute() +143
System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously) +69
I am completely at a loss here. If I create just any basic application from scratch and try and launch it, even with nothing added, I get this error screen. I have tried removing the
target framework="4.0" attribute from the
<compilation debug="true" targetFramework="4.0" />
tag and running it with no results. I have tried removing that attribute and adding
<startup useLegacyV2RuntimeActivationPolicy="true">
<supportedRuntime version="v2.0.50727"/>
<supportedRuntime version="v4.0.30319"/>
</startup>
as suggested in this thread: BadImageFormatException - Is it possible to specify which .NET version is used to run an executable?
I tried repairing the .Net 4.0 framework installation because I heard that may be an issue.
I just installed visual web developer last night in order to work on a project that I moved over from Microsoft Visual Studio 2010 because my trial version expired, any help or potential workarounds would be appreciated.

I experienced this issue today. As far as I understand it, the problem is that .NET 4.0 assemblies now default to security critical. It's not possible for security transparent code to call into security critical code.
The solution in my case was related to having AllowPartiallyTrustedCallersAttribute defined on only a few of the assemblies in my application. I had to either remove this attribute from all assemblies, or add it to all of them.

You may need to add the following to your AssemblyInfo.cs file so that the involved assemblies are the same.
[assembly: SecurityTransparent()]

Appreciate I'm extremely late to the party here but in VS2013 and suffering the same issue with a .NET 4.5.1 ClickOnce project, I fixed this issue by:
Opening the Project Properties of the ClickOnce project in question
Opening the Security tab
Changing the trust settings to "This is a partial trust application"
Changing the trust settings back to "This is a full trust application"
Hope this helps someone else!

Apparently, one potential workaround which at least made it possible for me to launch applications in Visual Web Developer was this:
Remove the targetFramework="4.0" attribute from the
element which is located within the element.
If it is a Silverlight application Right click the
ApplicationName.Web header select properties, then change the
target framework to 3.5. If it is an asp.net application right
click the top project header and select properties and then set
the target framework to 3.5.
All this suggests to me their is a problem with my .Net 4.0 framework installation. But as I have installed and uninstalled and then installed the .Net 4.0 framework at least twice, this is the only option I can think of at this point. If someone provides me a better response/More permanent solution that works for me I'll mark that as the answer. In the meantime I will try launching the "install other frameworks" and reinstalling both the .Net 4.0 targeting pack and .Net 4.0 Runtime once more to see if it works.