SealServerConfigurationEnableRazorScriptValidation Property

If true, Razor scripts are checked against a deny-list of API tokens before compilation (defense-in-depth). Disabled by default as scripts may legitimately use file/process/reflection APIs. The primary control remains restricting who can edit scripts.

public bool EnableRazorScriptValidation { get; set; }