Gemstone PhasorProtocols Library
Legacy
Properties
| SafeBinder | Default SerializationBinder used by Deserialize(Stream, SerializationBinder). Applies the same legacy GSF.* → Gemstone.* name translation as LegacyBinder, then enforces an allowlist so that only phasor-protocol configuration types can be materialized. Any type that resolves outside the allowed assemblies is rejected (returns null), which causes deserialization to fail closed before the type is allocated or its deserialization constructor runs. This neutralizes deserialization-gadget attacks while preserving full read compatibility for legitimate configuration files. |