Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Support for .NET Standard #3

Open
heikar opened this issue Oct 8, 2019 · 1 comment
Open

Support for .NET Standard #3

heikar opened this issue Oct 8, 2019 · 1 comment

Comments

@heikar
Copy link

heikar commented Oct 8, 2019 •
edited
Loading

Hi yallie,

is is possible/necessary to target the project to .NET Standard 2.0 or is the standard framework safe?

Many greetings
heikar
@yallie
Copy link
Member

yallie commented Oct 9, 2019

Hi @heikar ,

I'm not sure whether it's safe, I don't use .NET Core in production :)
I guess if BinaryFormatter is available in .NET Core, it can be vulnerable.
Would you mind experimenting with ysoserial.net payloads?

Some classes in SafeDeserializationHelpers are not relevant for .NET Core
because of the missing Remoting stack (channels, sinks, etc), but serialization
binder and delegate serialization holder perhaps can be relevant.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@yallie @heikar