Shared framework ships runtimeconfig.json with unwanted policy settings

[GrabYourPitchforks]

See #32941 (comment) for some additional context. The shared framework's runtimeconfig.json file contains this:

{
  "runtimeOptions": {
    "tfm": "net8.0",
    "configProperties": {
      "System.Reflection.Metadata.MetadataUpdater.IsSupported": false,
      "System.Runtime.Serialization.EnableUnsafeBinaryFormatterSerialization": false
    }
  }
}

The configProperties element is intended to be app-specific policy and shouldn't be included as part of the shared framework install. It looks like what's happening is that when we build the shared framework and publish it, we're also including its runtimeconfig.json file as an asset to be redistributed without first stripping the app-specific policy sections from the file.

If this issue is fixed in the .NET 8 timeframe, please revert #33004.

[marcpopMSFT]

@GrabYourPitchforks should we keep this open to revert your workaround?

[GrabYourPitchforks]

@marcpopMSFT Yes. The folks I spoke with agreed that this issue represents a legitimate bug in how the shared framework is built & redistributed. Once this bug is fixed, the workaround I checked in earlier should be reverted.

[marcpopMSFT]

@GrabYourPitchforks is there a pointer to the PR/issue tracking the bug in the shared framework so we know when to revert the workaround?

[elinor-fung]

I believe @vitek-karas fixed it on the arcade side with dotnet/arcade#13844. That flowed into runtime with dotnet/runtime#87996.