{"id":324,"date":"2023-08-02T14:50:23","date_gmt":"2023-08-02T11:50:23","guid":{"rendered":"https:\/\/kb.astrocroc.com\/?p=324"},"modified":"2023-08-02T14:50:23","modified_gmt":"2023-08-02T11:50:23","slug":"%d1%80%d0%b0%d0%b1%d0%be%d1%87%d0%b8%d0%b5-%d0%bf%d1%80%d0%be%d1%86%d0%b5%d1%81%d1%81%d1%8b-%d0%bd%d0%b5-%d1%80%d0%b0%d0%b1%d0%be%d1%82%d0%b0%d1%8e%d1%82-%d0%be%d1%88%d0%b8%d0%b1%d0%ba%d0%b0","status":"publish","type":"post","link":"https:\/\/kb.astrocroc.com\/?p=324","title":{"rendered":"\u0420\u0430\u0431\u043e\u0447\u0438\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b \u043d\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442, \u043e\u0448\u0438\u0431\u043a\u0430"},"content":{"rendered":"\n<p>\u041f\u043e\u0441\u043b\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043b\u044e\u0431\u043e\u0433\u043e \u0438\u0437\u00a0<a rel=\"noreferrer noopener\" href=\"https:\/\/na01.safelinks.protection.outlook.com\/?url=https%3A%2F%2Fblogs.msdn.microsoft.com%2Fdotnet%2F2018%2F09%2F11%2Fnet-framework-september-2018-security-and-quality-rollup%2F&amp;data=02%7C01%7C%7Cb8d21a09d1054bce2c7808d61f270787%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636730650053116802&amp;sdata=qbDi3HlyQs5tyZ5%2Fl3IclcbxqXzozqJMesDzGcFcOmc%3D&amp;reserved=0\" target=\"_blank\">\u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 .NET Framework \u0437\u0430 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044c 2018 \u0433.<\/a>\u00a0\u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f\u00a0<a rel=\"noreferrer noopener\" href=\"https:\/\/na01.safelinks.protection.outlook.com\/?url=https%3A%2F%2Fportal.msrc.microsoft.com%2Fen-US%2Fsecurity-guidance%2Fadvisory%2FCVE-2018-8421&amp;data=02%7C01%7C%7Cb8d21a09d1054bce2c7808d61f270787%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636730650053116802&amp;sdata=MALRjeOZRCW73j89t0KypO%2FybVsoi5VzC0RLVh3iQ8I%3D&amp;reserved=0\" target=\"_blank\">CVE-2018-8421<\/a>\u00a0(\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 .NET Framework) \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0435 \u0440\u0430\u0431\u043e\u0447\u0438\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b SharePoint \u043f\u0435\u0440\u0435\u0441\u0442\u0430\u044e\u0442 \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c.\u00a0\u041f\u0440\u0438 \u0432\u043e\u0437\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u0438 \u044d\u0442\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 \u0436\u0443\u0440\u043d\u0430\u043b \u0437\u0430\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u0437\u0430\u043f\u0438\u0441\u044c \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0435 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0433\u043e \u0432\u0438\u0434\u0430:<\/p>\n\n\n\n<pre class=\"wp-block-prismatic-blocks\"><code class=\"language-plaintext\" data-line=\"\">&lt;Date&gt; &lt;Time&gt; w3wp.exe (0x1868) 0x22FC SharePoint Foundation Workflow Infrastructure 72fs Unexpected RunWorkflow: Microsoft.SharePoint.SPException: &lt;Error&gt;&lt;CompilerError Line=&quot;-1&quot; Column=&quot;-1&quot; Text=&quot;Type System.CodeDom.CodeBinaryOperatorExpression is not marked as authorized in the application configuration file.&quot; \/&gt;&lt;CompilerError Line=&quot;-1&quot; Column=&quot;-1&quot; Text=&quot;Type System.CodeDom.CodeBinaryOperatorExpression is not marked as authorized in the application configuration file.&quot; \/&gt;&lt;CompilerError Line=&quot;-1&quot; Column=&quot;-1&quot; Text=&quot;Type System.CodeDom.CodeBinaryOperatorExpression is not marked as authorized in the application configuration file.&quot; \/&gt;&lt;CompilerError Line=&quot;-1&quot; Column=&quot;-1&quot; Text=&quot;Type System.CodeDom.CodeBinaryOperatorExpression is not marked as authorized in the application configuration file.&quot; \/&gt;&lt;CompilerError Line=&quot;-1&quot; Column=&quot;-1&quot; Text=&quot;Type System.CodeDom.CodeBinaryOperatorExpression is not marked as authorized in the application configuration file.&quot; \/&gt;&lt;CompilerError Line=&quot;-1&quot; Column=&quot;-1&quot; Text=&quot;Type System.CodeDom.CodeBinaryOperatorExpression is not marked as authorized in the application configuration file.&quot; \/&gt;&lt;CompilerError Line=&quot;-1&quot; Column=&quot;-1&quot; Text=&quot;Type System.CodeDom.CodeBinaryOperatorExpression is not marked as authorized in the application configuration file.&quot; \/&gt;&lt;CompilerError Line=&quot;-1&quot; Column=&quot;-1&quot;\u2026<\/code><\/pre>\n\n\n\n<p>\u0417\u0430\u043f\u0438\u0441\u044c \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0435 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442, \u0447\u0442\u043e\u00a0<strong>System.CodeDom.CodeBinaryOperatorExpression<\/strong>\u00a0\u043d\u0435 \u0432\u043a\u043b\u044e\u0447\u0435\u043d \u0432 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0442\u0438\u043f\u044b.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\" id=\"ID0EDP\">\u041f\u0440\u0438\u0447\u0438\u043d\u0430<\/h4>\n\n\n\n<p>Workflow Foundation (WF) \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0440\u0430\u0431\u043e\u0447\u0438\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b \u0442\u043e\u043b\u044c\u043a\u043e \u0442\u043e\u0433\u0434\u0430, \u043a\u043e\u0433\u0434\u0430 \u0432\u0441\u0435 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u0435 \u0442\u0438\u043f\u044b \u0438 \u0441\u0431\u043e\u0440\u043a\u0438 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u044b \u0432 \u0444\u0430\u0439\u043b\u0435 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 .NET (\u0438\u043b\u0438 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u044b \u044f\u0432\u043d\u043e \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u0434) \u0432 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c \u0434\u0435\u0440\u0435\u0432\u0435 web.config:<\/p>\n\n\n\n<p>&lt;configuration&gt;<\/p>\n\n\n\n<p>&lt;System.Workflow.ComponentModel.WorkflowCompiler&gt;<\/p>\n\n\n\n<p>&lt;authorizedTypes&gt;<\/p>\n\n\n\n<p>&lt;targetFx><\/p>\n\n\n\n<p>\u041e\u0434\u043d\u0430\u043a\u043e \u043f\u043e\u0441\u043b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0442\u0438\u043f\u044b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u0433\u043e\u0442\u043e\u0432\u044b\u043c\u0438 \u0440\u0430\u0431\u043e\u0447\u0438\u043c\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430\u043c\u0438 SharePoint, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0440\u0430\u043d\u0435\u0435 \u043d\u0435 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b\u0438\u0441\u044c, \u0442\u0435\u043f\u0435\u0440\u044c \u0442\u0440\u0435\u0431\u0443\u044e\u0442\u0441\u044f.<\/p>\n\n\n\n<p>\u0427\u0442\u043e\u0431\u044b \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u044d\u0442\u0443 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443, \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u0435 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u043d\u0435 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e, \u0438\u0437 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0441\u0442\u0430\u0442\u0435\u0439 \u0431\u0430\u0437\u044b \u0437\u043d\u0430\u043d\u0438\u0439:<\/p>\n\n\n\n<p><a href=\"https:\/\/support.microsoft.com\/en-us\/topic\/description-of-the-security-update-for-sharepoint-enterprise-server-2016-november-13-2018-cb78a1de-3719-8afe-e67d-a3524e28e591\">4461501<\/a>\u00a0\u00a0\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f SharePoint Enterprise Server 2016: 13 \u043d\u043e\u044f\u0431\u0440\u044f 2018 \u0433.<br><br><a href=\"https:\/\/support.microsoft.com\/en-us\/topic\/november-13-2018-cumulative-update-for-sharepoint-foundation-2013-kb4461508-11c90ecf-3f57-5301-1428-a40fad00e60e\">4461508<\/a>\u00a0\u00a013 \u043d\u043e\u044f\u0431\u0440\u044f 2018 \u0433., \u043d\u0430\u043a\u043e\u043f\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f SharePoint Foundation 2013 (KB4461508)<br><br><a href=\"https:\/\/support.microsoft.com\/en-us\/topic\/november-13-2018-cumulative-update-for-sharepoint-enterprise-server-2013-kb4461510-82ddb1cb-b114-c9e5-5958-5e3663840324\">4461510<\/a>\u00a0\u00a013 \u043d\u043e\u044f\u0431\u0440\u044f 2018 \u0433., \u043d\u0430\u043a\u043e\u043f\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f SharePoint Enterprise Server 2013 (KB4461510)<br>\u00a0<br><a href=\"https:\/\/support.microsoft.com\/en-us\/topic\/november-13-2018-update-for-sharepoint-foundation-2010-kb4011713-31dfb80f-6f04-45e6-ffc1-4ece48f5b89b\">401 1713<\/a>\u00a0\u0433., \u00a013 \u043d\u043e\u044f\u0431\u0440\u044f , 2018 \u0433., \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f SharePoint Foundation 2010 (KB4011713)<br><br><a href=\"https:\/\/support.microsoft.com\/en-us\/topic\/november-13-2018-cumulative-update-for-sharepoint-server-2010-kb4461528-000c674d-adcb-2030-e779-fd8eb0f08653\">4461528<\/a>\u00a0\u00a013 \u043d\u043e\u044f\u0431\u0440\u044f 2018 \u0433., \u043d\u0430\u043a\u043e\u043f\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f SharePoint Server 2010 (KB4461528)<\/p>\n\n\n\n<p><strong>\u041f\u0440\u0438\u043c\u0435\u0447\u0430\u043d\u0438\u044f<\/strong>&nbsp;<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>\u041f\u043e\u0441\u043b\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u043c\u0430\u0441\u0442\u0435\u0440 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 SharePoint, \u0447\u0442\u043e\u0431\u044b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u044b\u043b\u043e \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u043e.<\/li>\n\n\n\n<li>\u041d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0435 \u0438\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0440\u0430\u0431\u043e\u0447\u0435\u0433\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u043c\u043e\u0433\u0443\u0442 \u0438\u043c\u0435\u0442\u044c \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438.&nbsp;\u0415\u0441\u043b\u0438 \u0432\u044b \u0438\u0441\u043f\u044b\u0442\u044b\u0432\u0430\u0435\u0442\u0435 \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435, \u043f\u043e\u0445\u043e\u0436\u0435\u0435 \u043d\u0430 \u044d\u0442\u0443 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443, \u043d\u043e \u043d\u0435 \u043e\u0431\u0441\u0443\u0436\u0434\u0430\u0435\u043c\u043e\u0435 \u0432 \u044d\u0442\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435, \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u0435\u0441\u044c \u0437\u0430 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043a \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0443 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0440\u0430\u0431\u043e\u0447\u0435\u0433\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"ID0EDL\">\u041e\u0431\u0445\u043e\u0434\u043d\u043e\u0439 \u043f\u0443\u0442\u044c<\/h2>\n\n\n\n<p>\u0427\u0442\u043e\u0431\u044b \u043e\u0431\u043e\u0439\u0442\u0438 \u044d\u0442\u0443 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443, \u044f\u0432\u043d\u043e \u0434\u043e\u0431\u0430\u0432\u044c\u0442\u0435 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u0435 \u0442\u0438\u043f\u044b \u0432 \u0444\u0430\u0439\u043b Web.config \u0432\u0441\u0435\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439.\u00a0\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0448\u0430\u0433\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044e\u0442\u0441\u044f \u0432\u0440\u0443\u0447\u043d\u0443\u044e, \u043c\u044b \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u043c \u0432\u0430\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043c\u0435\u0442\u043e\u0434 \u0441\u043a\u0440\u0438\u043f\u0442\u0430.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u0414\u043e\u0431\u0430\u0432\u044c\u0442\u0435 \u0442\u0438\u043f\u044b \u0432\u0440\u0443\u0447\u043d\u0443\u044e<\/h2>\n\n\n\n<p>\u0427\u0442\u043e\u0431\u044b \u043e\u0431\u043e\u0439\u0442\u0438 \u044d\u0442\u0443 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443, \u044f\u0432\u043d\u043e \u0434\u043e\u0431\u0430\u0432\u044c\u0442\u0435 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u0435 \u0442\u0438\u043f\u044b \u0432 \u0444\u0430\u0439\u043b\u044b web.config \u0432\u0441\u0435\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439.<\/p>\n\n\n\n<p>\u0414\u043b\u044f SharePoint 2013 \u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439<\/p>\n\n\n\n<p>\u0414\u043b\u044f SharePoint 2013 \u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u0434\u043e\u0431\u0430\u0432\u044c\u0442\u0435 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0441\u0442\u0440\u043e\u043a\u0438:<\/p>\n\n\n\n<p>&lt;authorizedType Assembly=&#187;System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089&#8243; NameSpace=&#187;System.CodeDom&#187; TypeName=&#187;CodeBinaryOperatorExpression&#187; Authorized=&#187;True&#187; \/&gt;<\/p>\n\n\n\n<p>&lt;authorizedType Assembly=&#187;System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089&#8243; NameSpace=&#187;System.CodeDom&#187; TypeName=&#187;CodePrimitiveExpression&#187; Authorized=&#187;True&#187; \/&gt;<\/p>\n\n\n\n<p>&lt;authorizedType Assembly=&#187;System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089&#8243; NameSpace=&#187;System.CodeDom&#187; TypeName=&#187;CodeMethodInvokeExpression&#187; Authorized=&#187;True&#187; \/&gt;<\/p>\n\n\n\n<p>&lt;authorizedType Assembly=&#187;System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089&#8243; NameSpace=&#187;System.CodeDom&#187; TypeName=&#187;CodeMethodReferenceExpression&#187; Authorized=&#187;True&#187; \/&gt;<\/p>\n\n\n\n<p>&lt;authorizedType Assembly=&#187;System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089&#8243; NameSpace=&#187;System.CodeDom&#187; TypeName=&#187;CodeFieldReferenceExpression&#187; Authorized=&#187;True&#187; \/&gt;<\/p>\n\n\n\n<p>&lt;authorizedType Assembly=&#187;System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089&#8243; NameSpace=&#187;System.CodeDom&#187; TypeName=&#187;CodeThisReferenceExpression&#187; Authorized=&#187;True&#187; \/&gt;<\/p>\n\n\n\n<p>&lt;authorizedType Assembly=&#187;System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089&#8243; NameSpace=&#187;System.CodeDom&#187; TypeName=&#187;CodePropertyReferenceExpression&#187; Authorized=&#187;True&#187; \/&gt;<br>&nbsp;<\/p>\n\n\n\n<p>\u0414\u043b\u044f \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 SharePoint, \u0447\u0435\u043c SharePoint 2013.<\/p>\n\n\n\n<p>\u0414\u043b\u044f \u0432\u0435\u0440\u0441\u0438\u0439 SharePoint \u0434\u043e 2013 \u0432\u043c\u0435\u0441\u0442\u043e \u044d\u0442\u043e\u0433\u043e \u0434\u043e\u0431\u0430\u0432\u044c\u0442\u0435 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0441\u0442\u0440\u043e\u043a\u0438:<\/p>\n\n\n\n<pre class=\"wp-block-prismatic-blocks\"><code class=\"language-xml\" data-line=\"\">&lt;authorizedType Assembly=&quot;System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089&quot; Namespace=&quot;System.CodeDom&quot; TypeName=&quot;*&quot; Authorized=&quot;True&quot;\/&gt;\n&lt;authorizedType Assembly=&quot;System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089&quot; NameSpace=&quot;System.CodeDom&quot; TypeName=&quot;CodeBinaryOperatorExpression&quot; Authorized=&quot;True&quot; \/&gt;\n&lt;authorizedType Assembly=&quot;System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089&quot; NameSpace=&quot;System.CodeDom&quot; TypeName=&quot;CodePrimitiveExpression&quot; Authorized=&quot;True&quot; \/&gt;\n&lt;authorizedType Assembly=&quot;System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089&quot; NameSpace=&quot;System.CodeDom&quot; TypeName=&quot;CodeMethodInvokeExpression&quot; Authorized=&quot;True&quot; \/&gt;\n&lt;authorizedType Assembly=&quot;System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089&quot; NameSpace=&quot;System.CodeDom&quot; TypeName=&quot;CodeMethodReferenceExpression&quot; Authorized=&quot;True&quot; \/&gt;\n&lt;authorizedType Assembly=&quot;System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089&quot; NameSpace=&quot;System.CodeDom&quot; TypeName=&quot;CodeFieldReferenceExpression&quot; Authorized=&quot;True&quot; \/&gt;\n&lt;authorizedType Assembly=&quot;System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089&quot; NameSpace=&quot;System.CodeDom&quot; TypeName=&quot;CodeThisReferenceExpression&quot; Authorized=&quot;True&quot; \/&gt;\n&lt;authorizedType Assembly=&quot;System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089&quot; NameSpace=&quot;System.CodeDom&quot; TypeName=&quot;CodePropertyReferenceExpression&quot; Authorized=&quot;True&quot; \/&gt;<\/code><\/pre>\n\n\n\n<p>&lt;authorizedType Assembly=&#187;System, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089&#8243; NameSpace=&#187;System.CodeDom&#187; TypeName=&#187;CodeBinaryOperatorExpression&#187; Authorized=&#187;True&#187; \/&gt;<\/p>\n\n\n\n<p>&lt;authorizedType Assembly=&#187;System, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089&#8243; NameSpace=&#187;System.CodeDom&#187; TypeName=&#187;CodePrimitiveExpression&#187; Authorized=&#187;True&#187; \/&gt;<\/p>\n\n\n\n<p>&lt;authorizedType Assembly=&#187;System, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089&#8243; NameSpace=&#187;System.CodeDom&#187; TypeName=&#187;CodeMethodInvokeExpression&#187; Authorized=&#187;True&#187; \/&gt;<\/p>\n\n\n\n<p>&lt;authorizedType Assembly=&#187;System, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089&#8243; NameSpace=&#187;System.CodeDom&#187; TypeName=&#187;CodeMethodReferenceExpression&#187; Authorized=&#187;True&#187; \/&gt;<\/p>\n\n\n\n<p>&lt;authorizedType Assembly=&#187;System, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089&#8243; NameSpace=&#187;System.CodeDom&#187; TypeName=&#187;CodeFieldReferenceExpression&#187; Authorized=&#187;True&#187; \/&gt;<\/p>\n\n\n\n<p>&lt;authorizedType Assembly=&#187;System, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089&#8243; NameSpace=&#187;System.CodeDom&#187; TypeName=&#187;CodeThisReferenceExpression&#187; Authorized=&#187;True&#187; \/&gt;<\/p>\n\n\n\n<p>&lt;authorizedType Assembly=&#187;System, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089&#8243; NameSpace=&#187;System.CodeDom&#187; TypeName=&#187;CodePropertyReferenceExpression&#187; Authorized=&#187;True&#187; \/><\/p>\n\n\n\n<p><\/p>\n\n\n\n<p>\u041b\u0438\u0431\u043e, \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u0435 PowerShell \u0441\u043a\u0440\u0438\u043f\u0442:<\/p>\n\n\n\n<pre class=\"wp-block-prismatic-blocks\"><code class=\"language-powershell\" data-line=\"\">&lt;#\n\n This script adds the entries to all web.config files for all web applications in the farm.\n\n Run this script as Farm Administrator in one of the WFEs.\n\n This script has to run only one time.\n\nSUMMARY:\n\nThis script uses the native SharePoint SPWebConfigModification API to deploy new updates to the web.config file for each web application on each server in the farm.  Servers that are added at a later date will also get the updates applied because the API configuration is persisted in the config database.  This API does not update the web.config for the central administration web application.\n\nIf you are running workflows on the central admin web application, you will have to manually update the web.config by using the steps in the referenced blog.\n\n==============================================================\n\n#&gt;\n\nAdd-PSSnapin Microsoft.SharePoint.PowerShell -ErrorAction SilentlyContinue | Out-Null\n\nfunction Add-CodeDomAuthorizedType\n\n{\n\n    &lt;#\n\n    .Synopsis\n\n       Adds the necessary authorizedType elements to all web.config files for all non-central admin web applications\n\n \n\n    .DESCRIPTION\n\n       Adds the necessary authorizedType elements to all web.config files for all non-central admin web applications\n\n \n\n    .EXAMPLE\n\n       Add-CodeDomAuthorizedType\n\n \n\n    #&gt;\n\n    [CmdletBinding()]\n\n    param\n\n    (\n\n    )\n\n    begin\n\n    {\n\n        $farmMajorVersion = (Get-SPFarm -Verbose:$false ).BuildVersion.Major\n\n        $contentService = [Microsoft.SharePoint.Administration.SPWebService]::ContentService\n\n        $typeNames = @( &quot;CodeBinaryOperatorExpression&quot;, &quot;CodePrimitiveExpression&quot;, &quot;CodeMethodInvokeExpression&quot;, &quot;CodeMethodReferenceExpression&quot;, &quot;CodeFieldReferenceExpression&quot;,&quot;CodeThisReferenceExpression&quot;, &quot;CodePropertyReferenceExpression&quot;)\n\n   \n\n    }\n\n    process\n\n    {\n\n        if( @($contentService.WebConfigModifications | ? { $_.Name -eq &quot;NetFrameworkAuthorizedTypeUpdate&quot; }).Count -gt 0 )\n\n        {\n\n            Write-Warning &quot;Existing NetFrameworkAuthorizedTypeUpdate entries found, this script has to be run only one time per farm.&quot;\n\n            return\n\n        }\n\n        if( $farmMajorVersion -le 14 ) # 2010, 2007\n\n        {\n\n            foreach( $typeName in $typeNames )\n\n            {\n\n                # System, Version=2.0.0.0\n\n                $netFrameworkConfig = New-Object Microsoft.SharePoint.Administration.SPWebConfigModification\n\n                $netFrameworkConfig.Path     = &quot;configuration\/System.Workflow.ComponentModel.WorkflowCompiler\/authorizedTypes&quot;\n\n                $netFrameworkConfig.Name     = &quot;authorizedType[@Assembly=&#039;System, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089&#039;][@Namespace=&#039;System.CodeDom&#039;][@TypeName=&#039;{0}&#039;][@Authorized=&#039;True&#039;]&quot; -f $typeName\n\n                $netFrameworkConfig.Owner    = &quot;NetFrameworkAuthorizedTypeUpdate&quot;\n\n                $netFrameworkConfig.Sequence = 0\n\n                $netFrameworkConfig.Type     = [Microsoft.SharePoint.Administration.SPWebConfigModification+SPWebConfigModificationType]::EnsureChildNode\n\n                $netFrameworkConfig.Value    = &#039;&lt;authorizedType Assembly=&quot;System, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089&quot; Namespace=&quot;System.CodeDom&quot; TypeName=&quot;{0}&quot; Authorized=&quot;True&quot;\/&gt;&#039; -f $typeName\n\n           \n\n                $contentService.WebConfigModifications.Add($netFrameworkConfig);\n\n            }\n\n        }\n\n        else # 2013+\n\n        {\n\n            foreach( $typeName in $typeNames )\n\n            {\n\n                # System, Version=4.0.0.0\n\n                $netFrameworkConfig = New-Object Microsoft.SharePoint.Administration.SPWebConfigModification\n\n                $netFrameworkConfig.Path     = &quot;configuration\/System.Workflow.ComponentModel.WorkflowCompiler\/authorizedTypes\/targetFx&quot;\n\n                $netFrameworkConfig.Name     = &quot;authorizedType[@Assembly=&#039;System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089&#039;][@Namespace=&#039;System.CodeDom&#039;][@TypeName=&#039;{0}&#039;][@Authorized=&#039;True&#039;]&quot; -f $typeName\n\n                $netFrameworkConfig.Owner    = &quot;NetFrameworkAuthorizedTypeUpdate&quot;\n\n                $netFrameworkConfig.Sequence = 0\n\n                $netFrameworkConfig.Type     = [Microsoft.SharePoint.Administration.SPWebConfigModification+SPWebConfigModificationType]::EnsureChildNode\n\n                $netFrameworkConfig.Value    = &#039;&lt;authorizedType Assembly=&quot;System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089&quot; Namespace=&quot;System.CodeDom&quot; TypeName=&quot;{0}&quot; Authorized=&quot;True&quot;\/&gt;&#039; -f $typeName\n\n           \n\n                $contentService.WebConfigModifications.Add($netFrameworkConfig);\n\n            }\n\n        }\n\n        Write-Verbose &quot;Updating web.configs&quot;\n\n        $contentService.Update()\n\n        $contentService.ApplyWebConfigModifications();\n\n    }\n\n    end\n\n    {\n\n    }   \n\n}\n\nfunction Remove-CodeDomAuthorizedType\n\n{\n\n    &lt;#\n\n    .Synopsis\n\n       Removes any web configuration entries owned by &quot;NetFrameworkAuthorizedTypeUpdate&quot;\n\n \n\n    .DESCRIPTION\n\n       Removes any web configuration entries owned by &quot;NetFrameworkAuthorizedTypeUpdate&quot;\n\n \n\n    .EXAMPLE\n\n        Remove-CodeDomAuthorizedType\n\n    #&gt;\n\n    [CmdletBinding()]\n\n    param()\n\n    begin\n\n    {\n\n        $contentService = [Microsoft.SharePoint.Administration.SPWebService]::ContentService\n\n    }\n\n    process\n\n    {\n\n        $webConfigModifications = @($contentService.WebConfigModifications | ? { $_.Owner -eq &quot;NetFrameworkAuthorizedTypeUpdate&quot; })\n\n        foreach ( $webConfigModification in $webConfigModifications )\n\n        {\n\n            Write-Verbose &quot;Found instance owned by NetFrameworkAuthorizedTypeUpdate&quot;\n\n            $contentService.WebConfigModifications.Remove( $webConfigModification ) | Out-Null\n\n        }\n\n        \n\n        if( $webConfigModifications.Count -gt 0 )\n\n        {\n\n            $contentService.Update()\n\n            $contentService.ApplyWebConfigModifications()\n\n        }\n\n    }\n\n    end\n\n    {\n\n    }   \n\n}\n\n# The following command will get the timerjob responsible for the web.config change deployment\n\n# Get-SPTimerJob | ? { $_.Name -eq &quot;job-webconfig-modification&quot; }\n\n \n\n# The following command will make the appropriate changes\n\nAdd-CodeDomAuthorizedType\n\n# Remove the following command if you have to remove the web.config updates, you can use this function to retract the changes\n\n# Remove-CodeDomAuthorizedType<\/code><\/pre>\n","protected":false},"excerpt":{"rendered":"<p>\u041f\u043e\u0441\u043b\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043b\u044e\u0431\u043e\u0433\u043e \u0438\u0437\u00a0\u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 .NET Framework \u0437\u0430 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044c 2018 \u0433.\u00a0\u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f\u00a0CVE-2018-8421\u00a0(\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 .NET Framework) \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0435 \u0440\u0430\u0431\u043e\u0447\u0438\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b SharePoint \u043f\u0435\u0440\u0435\u0441\u0442\u0430\u044e\u0442 \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c.\u00a0\u041f\u0440\u0438 \u0432\u043e\u0437\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u0438 \u044d\u0442\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 \u0436\u0443\u0440\u043d\u0430\u043b \u0437\u0430\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u0437\u0430\u043f\u0438\u0441\u044c \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0435 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0433\u043e \u0432\u0438\u0434\u0430: \u0417\u0430\u043f\u0438\u0441\u044c \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0435 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442, \u0447\u0442\u043e\u00a0System.CodeDom.CodeBinaryOperatorExpression\u00a0\u043d\u0435 \u0432\u043a\u043b\u044e\u0447\u0435\u043d \u0432 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0442\u0438\u043f\u044b. \u041f\u0440\u0438\u0447\u0438\u043d\u0430 Workflow Foundation (WF) \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0440\u0430\u0431\u043e\u0447\u0438\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b \u0442\u043e\u043b\u044c\u043a\u043e \u0442\u043e\u0433\u0434\u0430, \u043a\u043e\u0433\u0434\u0430 \u0432\u0441\u0435 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u0435 [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[11],"tags":[53],"class_list":["post-324","post","type-post","status-publish","format-standard","hentry","category-sharepoint","tag-53"],"blocksy_meta":[],"_links":{"self":[{"href":"https:\/\/kb.astrocroc.com\/index.php?rest_route=\/wp\/v2\/posts\/324","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/kb.astrocroc.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/kb.astrocroc.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/kb.astrocroc.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/kb.astrocroc.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=324"}],"version-history":[{"count":1,"href":"https:\/\/kb.astrocroc.com\/index.php?rest_route=\/wp\/v2\/posts\/324\/revisions"}],"predecessor-version":[{"id":325,"href":"https:\/\/kb.astrocroc.com\/index.php?rest_route=\/wp\/v2\/posts\/324\/revisions\/325"}],"wp:attachment":[{"href":"https:\/\/kb.astrocroc.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=324"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/kb.astrocroc.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=324"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/kb.astrocroc.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=324"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}