CVE-2021-46703: Code injection in RazorEngine

The vulnerability stems from two key factors: 1) The IsolatedRazorEngineService's reliance on deprecated CAS mechanisms for sandboxing, which Microsoft explicitly states should not be considered secure. 2) The RazorDynamicObject.Create method's ability to compile and execute arbitrary expressions through dynamic object manipulation. The provided PoC in GitHub issue #585 demonstrates how combining these features allows writing files to disk via malicious templates. While the exact file paths are inferred from standard RazorEngine structure, the functional relationships are clearly established through the vulnerability description and test case.