The recently exposed security vulnerabilities regarding serialization in .NET have ambiguous recommendations. What is the correct way to securely use JSON.NET?<
Well appears the answer is right in front of me in the documentation:
"Incoming types should be validated with a custom SerializationBinder when deserializing with a value other than None."