XBAP applications have certain restrictions on what
.NET features they can use. Since they run in partial trust, they are restricted to the same set of permission granted to any InternetZone application. Nearly all standard WPF functionality, however, around 99%, is available to an XBAP application. Therefore, most of the WPF
UI features are available. Starting in February 2009, XBAP applications no longer function when run from the Internet. Attempting to run the XBAP will cause the browser to present a generic error message. An option exists in Internet Explorer 9 that can be used to allow the applications to run, but this must be done with care as it increases the potential
attack surface - and there have been security vulnerabilities in XBAP.
Permitted • 2D drawing • 3D • Animation • Audio
Not permitted • Access to OS
drag-and-drop • Bitmap effects (these are deprecated in .NET 3.5 SP1) • Direct database communication (unless the application is fully trusted) • Interoperability with Windows controls or
ActiveX controls • Most standard dialogs • Shader effects • Stand-alone Windows ==See also==