DEV Community

Discussion on: Run EF Core Queries on SQL Server From Blazor WebAssembly

Collapse
 
likebrain profile image
Ricardo Rivera

really cool, 🙂
But be careful with projection and those things.

source.Select (s => {File.Create (""); return s;})

I believe that security must be ensured on several levels here. For example, the server should run under a limited user context in order to prevent unwanted access.

You run client generated code on the server (similar to Eval). Sooner or later, security will become an issue. I believe that the contract facade of e.g. gRPC is safer (by design). Here you are required to parameterize all queries. That reduces the vector enormously.

I think the ExpressionPowerTools could be very useful for internal communication. As a middle-tier-servers or cache-node container, this could help many monoliths with the transformation!!

Thank you for the great post, I hope the project goes ahead ❤