s&box: .NET API whitelist — blocked APIs and their s&box equivalents (System.IO, HttpClient, Reflection)