In essence, the fully trusted code is making a privileged call on behalf of user code without making sure that the user code has the right to make that call.

• 实质上,完全受信任的代码是在代表用户代码进行具有特权的调用,而并不确保用户代码具有执行该调用的权限。