Under what circumstances is a safe control entry necessary? All the examples on internet talk about creating a visual webpart project, signing dll, adding safecontrol entry and then adding to masterpage. I have a sitdefinition solution which has a few projects. One project has a visual webpart and visual studio automatically added safecontrol entry in web.config. I have a usercontrol which i would like to place on masterpage but I cant find the safecontrol options in the properties panel and I was able to deploy the wsp and also put the usercontrol on the masterpage without any error about "type not being safe". Under what circumstances is a safe control entry necessary?Do all webparts built by user have to be registered as safecontrol? Is it required in this instance and how do i do it if required?
For security, SharePoint differentiates between Web controls that are protected against script injection and Web controls that are not. Protected controls, or safe controls, can be accessed by untrusted users.
Also check this link for more details