LegacySoapDeserializerSafeBinder Property
Default
SerializationBinder used by
Deserialize(Stream, SerializationBinder). Applies the same legacy
GSF.* → Gemstone.* name translation as
LegacyBinder, then enforces an
allowlist so that only phasor-protocol configuration types can be materialized. Any type that resolves
outside the allowed assemblies is rejected (returns
null), which causes deserialization to fail
closed before the type is allocated or its deserialization constructor runs. This neutralizes
deserialization-gadget attacks while preserving full read compatibility for legitimate configuration files.
Namespace: Gemstone.PhasorProtocolsAssembly: Gemstone.PhasorProtocols (in Gemstone.PhasorProtocols.dll) Version: 1.0.185 -- Release Build+d25240b8c71a9dfaab3d3aca9be71daf1bfd417e
Gemstone.PhasorProtocols.LegacySoapDeserializer.get_SafeBinder = function();
Property Value
SerializationBinder