LegacySoapDeserializerSafeBinder Property
Default
SerializationBinder used by
Deserialize(Stream, SerializationBinder). Applies the same legacy
GSF.* → Gemstone.* name translation as
LegacyBinder, then enforces an
allowlist so that only phasor-protocol configuration types can be materialized. Any type that resolves
outside the allowed assemblies is rejected (returns
null), which causes deserialization to fail
closed before the type is allocated or its deserialization constructor runs. This neutralizes
deserialization-gadget attacks while preserving full read compatibility for legitimate configuration files.
Namespace: Gemstone.PhasorProtocolsAssembly: Gemstone.PhasorProtocols (in Gemstone.PhasorProtocols.dll) Version: 1.0.187 -- Release Build+c9c1088b6e2a65c4a6e6b8eccc6dcbe1c00bd580
Gemstone.PhasorProtocols.LegacySoapDeserializer.get_SafeBinder = function();
Property Value
SerializationBinder