LegacySoapDeserializerSafeBinder Property
Default
SerializationBinder used by
Deserialize(Stream, SerializationBinder). Applies the same legacy
GSF.* → Gemstone.* name translation as
LegacyBinder, then enforces an
allowlist so that only phasor-protocol configuration types can be materialized. Any type that resolves
outside the allowed assemblies is rejected (returns
null), which causes deserialization to fail
closed before the type is allocated or its deserialization constructor runs. This neutralizes
deserialization-gadget attacks while preserving full read compatibility for legitimate configuration files.
Namespace: Gemstone.PhasorProtocolsAssembly: Gemstone.PhasorProtocols (in Gemstone.PhasorProtocols.dll) Version: 1.0.184 -- Release Build+b0b2ff1f033523f844e7ac10acfed2a28ba762fc
Gemstone.PhasorProtocols.LegacySoapDeserializer.get_SafeBinder = function();
Property Value
SerializationBinder