Skip to content

Hyperion v0.11.2
Compare
Choose a tag to compare
@Aaronontheweb Aaronontheweb released this 07 Oct 16:48
0.11.2
10a8b03
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.

0.11.2 October 7 2021

  • Fix exception thrown during deserialization when preserve object reference was turned on
    and a surrogate instance was inserted into a collection multiple times. #264
  • Add support for AggregateException serialization. #266

0.11.1 August 17 2021

We've added a deserialization safety check to block dangerous types from being deserialized.
This is done to add a layer of security from possible code injection and code execution attack.
Currently it is an all or nothing feature that can be turned on and off by using the new DisallowUnsafeTypes flag inside SerializerOptions (defaults to true).

The unsafe types that are currently blocked are:

  • System.Security.Claims.ClaimsIdentity
  • System.Windows.Forms.AxHost.State
  • System.Windows.Data.ObjectDataProvider
  • System.Management.Automation.PSObject
  • System.Web.Security.RolePrincipal
  • System.IdentityModel.Tokens.SessionSecurityToken
  • SessionViewStateHistoryItem
  • TextFormattingRunProperties
  • ToolboxItemContainer
  • System.Security.Principal.WindowsClaimsIdentity
  • System.Security.Principal.WindowsIdentity
  • System.Security.Principal.WindowsPrincipal
  • System.CodeDom.Compiler.TempFileCollection
  • System.IO.FileSystemInfo
  • System.Activities.Presentation.WorkflowDesigner
  • System.Windows.ResourceDictionary
  • System.Windows.Forms.BindingSource
  • Microsoft.Exchange.Management.SystemManager.WinForms.ExchangeSettingsProvider
  • System.Diagnostics.Process
  • System.Management.IWbemClassObjectFreeThreaded

0.11.0 July 8 2021

Possible breaking changes

The change to the object serializer field ordering might cause a deserialization failure of persisted objects
that are serialized using the Hyperion serializer.

Please report any serialization problem that occurs after an upgrade to this version at the
issue tracker

0.10.2 June 30 2021

0.10.1 April 20 2021

Changes:

  • 10a8b03 0.11.2 Release
  • ca89f72 Update RELEASE_NOTES.md for 0.11.2 release (#267)
  • b83c5bf Add custom AggregateException serializer. (#266)
  • 41ceaaa Fix preserved reference surrogate in collection deserialization bug (#264)
  • fe66397 Bump ApprovalTests from 5.7.0 to 5.7.1 (#262)
  • d2d7c81 Bump FSharp.Core from 5.0.2 to 6.0.0 (#260)
  • ca0d25c Bump AkkaVersion from 1.4.24 to 1.4.26 (#261)
  • 974868a Bump FluentAssertions from 6.0.0 to 6.1.0 (#258)
  • 5a3415a Bump AkkaVersion from 1.4.23 to 1.4.24 (#257)

This list of changes was auto generated.

Assets 4
Loading