LegacySoapDeserializerSafeBinder Property
Default
SerializationBinder used by
Deserialize(Stream, SerializationBinder). Applies the same legacy
GSF.* → Gemstone.* name translation as
LegacyBinder, then enforces an
allowlist so that only phasor-protocol configuration types can be materialized. Any type that resolves
outside the allowed assemblies is rejected (returns
null), which causes deserialization to fail
closed before the type is allocated or its deserialization constructor runs. This neutralizes
deserialization-gadget attacks while preserving full read compatibility for legitimate configuration files.
Namespace: Gemstone.PhasorProtocolsAssembly: Gemstone.PhasorProtocols (in Gemstone.PhasorProtocols.dll) Version: 1.0.183 -- Release Build+673491a1afa103b255aa8db4f2bc6d4e220a63e0
Gemstone.PhasorProtocols.LegacySoapDeserializer.get_SafeBinder = function();
Property Value
SerializationBinder