BinaryFormatter serialization and deserialization are disabled about z.extensionmethods HOT 1 CLOSED

Hello @alonstar ,

Sorry for the long delay,

Unfortunately, I don't think we will do anything here,

You can re-enable it this way:

<PropertyGroup>
    <TargetFramework>net5.0</TargetFramework>
    <EnableUnsafeBinaryFormatterSerialization>true</EnableUnsafeBinaryFormatterSerialization>
</PropertyGroup>

Honestly, we don't agree with Microsoft decision on this. If you know what you are doing, there is nothing dangerous. That's no more dangerous than doing some bad code with a SQL Command. The scenario they provide in the section The risks of assuming data to be trustworthy are pretty much extreme and kind of scenario I would not have recommended doing.

For backward compatibility and because other serializers in the "Preferred alternatives" doesn't do exactly what the BinaryFormatter do, we prefer to let the code like this

Best Regards,

Jon

Sponsorship
Help us improve this library

Performance Libraries
context.BulkInsert(list, options => options.BatchSize = 1000);
Entity Framework Extensions • Bulk Operations • Dapper Plus

Runtime Evaluation
Eval.Execute("x + y", new {x = 1, y = 2}); // return 3
C# Eval Function • SQL Eval Function

from z.extensionmethods.