Newtonsoft JSON.NET Security Vulnerability Implementation

后端 未结 1 965
醉话见心
醉话见心 2021-02-08 05:52

The recently exposed security vulnerabilities regarding serialization in .NET have ambiguous recommendations. What is the correct way to securely use JSON.NET?<

1条回答
  •  [愿得一人]
    2021-02-08 06:26

    Well appears the answer is right in front of me in the documentation:

    "Incoming types should be validated with a custom SerializationBinder when deserializing with a value other than None."

    0 讨论(0)
提交回复
热议问题