Why does ASP.NET MVC use Code Access Security?

Question

I'm a little curious about why CAS is being extensively used in MVC. A lot of it seems to be suppressedmessages too. I may have misunderstood it but I always thought you didn't need to use CAS if you fully trusted the code/server you used.

Answer 1

CAS is not used directly by MVC since the MVC binary is security transparent. If you're looking through the source and are curious, the [SuppressMessage] attributes are just there to tell FxCop not to worry about link demands.