-
Notifications
You must be signed in to change notification settings - Fork 5
Open
Description
The strings aren't compile-time encrypted, they're just baked into the *.dll rather than the *.exe.
Reproducable with strings from SysInternals.
C:\Users\[User]\Downloads>strings.exe "[Path]\SecureStringNAOT\SecureStringNAOT\SecureStringNAOT\bin\Release\net7.0\SecureStringNAOT.dll" > out.txt
While the *.exe doesn't show the strings:
This means if you try to make a NativeAOT single-published file, the string is still in the executable.
I tried under both .net 7,8,9 with all the same result.
Metadata
Metadata
Assignees
Labels
No labels

