[Serializable] Classes about lucenenet HOT 2 CLOSED

It turns out that per Microsoft, binary serialization is not meant for new applications, but only for helping with the transition from .NET Framework to .NET Core (https://github.com/dotnet/corefx/issues/23584)

It's crucial that we state as often as possible that binary serialization is not intended to be used for new applications but to make porting from Desktop to Core easier. There are tons of security concerns that are introduced by binary serialization, one of it is reading from a stream that could be compromised (network transferred date, e.g. in remoting).

So, it looks like the best "strategy" for this will be to leave the attribute off of ALL of the classes (including exceptions) except for those that explicitly require it in order for Lucene.Net to function. All legacy tests that verify serialization support should be disabled/removed.

from lucenenet.

This was posted on the Lucene dev list today:

Serializatio/Deserialization of Lucene objects like queries, sort fields etc

This seems to back up my previous statement about removing serialization from Lucene.NET classes, since that is the direction that Lucene has gone, as well.

from lucenenet.