Enable Control Flow Guard on Runtime DLLs

[JeremyBridges]

Our PEN testers recently pointed out that the Runtime DLLs packaged with the Maps SDK are not compiled with Control Flow Guard enabled (RuntimeCoreNet100_15_1.dll and RuntimeCoreNet100_15_1.WPF.dll). If that can be done with the next nuget package, or that is already out there with later versions of the Runtime, that would be great. Thanks in advance!

https://learn.microsoft.com/en-us/windows/win32/secbp/control-flow-guard

[dotMorten_esri · Accepted solution]

Thank you for bringing this to our attention. We'll investigate and see if this is something we can enable in a future release without causing any unwanted side-effects. However it is unlikely such a change will make it into a 100.15 patch release, and more likely to be in an upcoming 200.x release.


Ref: devops/2940

[JeremyBridges]

Sounds great, Morten. We'll take up 200.x soon. Thank you!