Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Consider adding an option for MobileFormatter to ignore version/signing on deserialization #3036

Open
rockfordlhotka opened this issue Jul 27, 2022 · 0 comments

Comments

@rockfordlhotka
Copy link
Member

Although very risky and unsafe for a user, it may be possible for MobileFormatter to have an option to allow deserialization into a type of the same name/assembly where the version and signing information doesn't match.

The referenced discussion thread contains info about why this is risky and may lead to people having hard-to-find and hard-to-solve issues in their app.


Number 4: Apparently we are not using the SerializationInfo correctly. We add all of an object's properties using info.AddValue function regardless of if the value is a custom type or IMobileObject type or System type.

  1. Add an option to turn on assembly/type matching somewhere in the CSLA options (default setting is off)
  2. Change MobileFormatter to look at the matching options

Should just be those two.

Originally posted by @crazyfox55 in #3021 (comment)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant