Skip to content

Conversation

JRahnama
Copy link
Contributor

@JRahnama JRahnama commented Jan 7, 2021

BinaryFormatter is not secure. During testing for net5 and some other tests we noticed it has only been used in .NETFramework inside SqlDependency and there was no track of it inside NetCore.

According to MS Documentation we had couple of alternative options. XMLSerializer can only work on public methods.

DataContractSerializer is chosen as it can work on private and public members.

@cheenamalhotra cheenamalhotra added this to the 3.0.0-preview1 milestone Feb 16, 2021
@JRahnama JRahnama merged commit 25cde90 into dotnet:master Feb 18, 2021
@JRahnama JRahnama deleted the Remove-BinaryFormatter branch July 6, 2021 19:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants