Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

FIX | Removing BinaryFormatter from NetFx #869

Merged
merged 14 commits into from
Feb 18, 2021

Conversation

JRahnama
Copy link
Contributor

@JRahnama JRahnama commented Jan 7, 2021

BinaryFormatter is not secure. During testing for net5 and some other tests we noticed it has only been used in .NETFramework inside SqlDependency and there was no track of it inside NetCore.

According to MS Documentation we had couple of alternative options. XMLSerializer can only work on public methods.

DataContractSerializer is chosen as it can work on private and public members.

@cheenamalhotra cheenamalhotra added this to the 3.0.0-preview1 milestone Feb 16, 2021
@JRahnama JRahnama merged commit 25cde90 into dotnet:master Feb 18, 2021
@JRahnama JRahnama deleted the Remove-BinaryFormatter branch July 6, 2021 19:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants