I’ll translate that reply.
The official position of the ASP.NET team is that average confidence is obsolete. This means some things:
- We are automatically solving all Trust-related bugs
Medium reported to us as "will not solve".
We provide guidance to hosters that they should migrate from
average confidence and proper use isolation level OS instead
(http://support.microsoft.com/kb/2698981).
We are removing support for the average confidence of frames that
we develop (MVC, Webapi, Signalr, and so on). From here to
front, the applications built in these structures will require confidence
total.
Here, the term "average confidence" above refers to all non-capital trust settings in ASP.NET, including the use of built-in confidence levels (Minimal, Low, Medium, High) or any custom confidence levels.
Edit 26 May 2015: O . NET Framework as a whole has overridden partial trust, and customers are advised not to trust it as a security limit. From MSDN:
You also have the option to use Azure, you can even host a basic website with a bank of up to 20Mb for free. (user comment Renatto Machado)
I went through exactly this problem at Locaweb and had no way. I had to downgrade to MVC 4, with Framework 4.0 and replace Ninject with Autofac.
– Leandro Angelo
Opa @Leandroangelo can turn your comment into a reply giving a little more details please? I would like to understand this alternative a little better...
– Jedaias Rodrigues
Do you still need the same thing? A free service? That’s your question?
– durtto
@durtto my question is if there is any alternative to make the Asp.Net MVC project work on a Medium-Trust server, even if you have to use MVC 4 or something like that as commented the Leandroangelo
– Jedaias Rodrigues