LegacySoapDeserializerSafeBinder Property

Default SerializationBinder used by Deserialize(Stream, SerializationBinder). Applies the same legacy GSF.* → Gemstone.* name translation as LegacyBinder, then enforces an allowlist so that only phasor-protocol configuration types can be materialized. Any type that resolves outside the allowed assemblies is rejected (returns null), which causes deserialization to fail closed before the type is allocated or its deserialization constructor runs. This neutralizes deserialization-gadget attacks while preserving full read compatibility for legitimate configuration files.

Definition

Namespace: Gemstone.PhasorProtocols
Assembly: Gemstone.PhasorProtocols (in Gemstone.PhasorProtocols.dll) Version: 1.0.183 -- Release Build+673491a1afa103b255aa8db4f2bc6d4e220a63e0
public static SerializationBinder SafeBinder { get; }

Property Value

SerializationBinder

See Also