Script security policy
- Last UpdatedApr 16, 2026
- 1 minute read
If the script fails to meet the policies described in this section, CONNECT visualization will reject it during the ingest process.
Allowed types and namespaces
Scripts must use only types and namespaces that are explicitly allowed in CONNECT visualization. These include core .NET data types, selected collection and text handling namespaces, and approved visualization namespaces. For details, see Allowed types and namespaces.
Allowed ViewApp attributes
Only certain ViewApp attributes are supported in CONNECT visualization. For details, see ViewApp attributes supported in CONNECT visualization.
Statement limit
Each script is limited to a maximum of 300 executable statements. Comments and empty lines do not count toward this limit.
Restricted operations
The following script behaviors are not allowed:
-
Accessing the file system
-
Performing network operations
-
Loading or invoking custom script libraries
-
Attempting to use desktop APIs or system-level features
-
Any operation that bypasses browser sandboxing or web security principles
How to avoid issues
Many issues are attributable to overly complex script blocks. These can be avoided by simplifying logic and removing any operations that rely on unrestricted execution.
Additional scripting information
For general information about scripting, see QuickScript references in the Industrial Graphic Editor documentation.