I am in the process of evaluating WPF as a potential technology for future application development, and I have a question about the web browser application (WBA) sandbox model.
Based on what I have read so far, it seems that, in order to prevent UI spoofing, opening a dialog box or new top-level window from
within a web browser application is not currently permitted. However, there are certainly scenarios where this type of behavior would be desirable - an application might want to display a dialog to collect information from a user, or launch a new window to display a document or image file. Not offering the ability to do so would seem to limit the types of applications that can be deployed as WBAs.
It would be ideal if a web browser application could request permission from
the user to open additional windows, similar to the way the pop-up
blocker feature in Internet Explorer currently works.
Generally speaking, is it possible for a WPF web browser application to
request additional permissions beyond what is allowed by the default
partial trust sandbox In other words, is there any middle ground
between the partial trust environment in which browser applications run
and the full trust environment in which installed applications run

WBA sandbox question
Damian Coverly
AnandAsir
Mike Harsh, a member of the WPF/E team, just posted Joe Stegman's slides from Mix06 about WPF/E...
While not using the XBAP model directly, I'd imagine that constraining yourself to things you can do in partial trust is a good way to prepare for WPF/E...
There will be things that you can use in XBAP that you can't use in a WPF/E application.
If you have questions, I'd post them to Mike's blog or ask him where to post...
Rob Relyea
WPF, PM
http://longhornblogs.com/rrelyea
kikoBYTES
http://blogs.msdn.com/karstenj/archive/2005/11/29/498061.aspx
However, you have to manually add on the client machine the certificate to the trusted publishers.
In my opinion, if you need more permissions, use a standalone application instead. Use ClickOnce to deploy it in online mode only, sign it with a certificate from Verisign etc.
Akd02