LegacySoapDeserializerSafeBinder Property
Default
SerializationBinder used by
Deserialize(Stream, SerializationBinder). Applies the same legacy
GSF.* → Gemstone.* name translation as
LegacyBinder, then enforces an
allowlist so that only phasor-protocol configuration types can be materialized. Any type that resolves
outside the allowed assemblies is rejected (returns
null), which causes deserialization to fail
closed before the type is allocated or its deserialization constructor runs. This neutralizes
deserialization-gadget attacks while preserving full read compatibility for legitimate configuration files.
Namespace: Gemstone.PhasorProtocolsAssembly: Gemstone.PhasorProtocols (in Gemstone.PhasorProtocols.dll) Version: 1.0.189 -- Release Build+f18be3298deb6f1d6a1aa9db365605e74583d8b3
Gemstone.PhasorProtocols.LegacySoapDeserializer.get_SafeBinder = function();
Property Value
SerializationBinder