It rather involved being on the other side of this airtight hatchway: Gaining code execution from a Trojan horse January 3, 2023 Jan 3, 2023 01/3/23 Raymond Chen You already have code execution, so it's not surprising that you can gain code execution.
Opinionated notes on the Windows.Data.Json namespace January 2, 2023 Jan 2, 2023 01/2/23 Raymond Chen It's available if you need it, but there are some tricks and pitfalls, and you may very well have better options.