DeserializationSettings.DenyBinaryFormatter() Method

Disables BinaryFormatter deserialization in the application to address BinaryFormatter Obsoletion Strategy.

Namespace: DevExpress.Utils

Assembly: DevExpress.Data.v24.1.dll

NuGet Package: DevExpress.Data

Declaration

C#

public static IDisposable DenyBinaryFormatter()

VB.NET

Public Shared Function DenyBinaryFormatter As IDisposable

Returns

Type
IDisposable

Remarks

Call the DenyBinaryFormatter method at application startup to disable BinaryFormatter deserialization:

C#

static void Main() {
    DevExpress.Utils.DeserializationSettings.DenyBinaryFormatter();
    Application.Run(new Form1());  
}

VB.NET

Shared Sub Main()
DevExpress.Utils.DeserializationSettings.DenyBinaryFormatter()
    Application.Run(New Form1())
End Sub

Use the InvokeWithBinaryFormatterDenied method to disable BinaryFormatter deserialization for a certain part of your code:

C#

DevExpress.Utils.DeserializationSettings.InvokeWithBinaryFormatterDenyed(()=>{  
    // BinaryFormatter is disabled.
});

VB.NET

Shared Sub Main()
DevExpress.Utils.DeserializationSettings.InvokeWithBinaryFormatterDenyed(Sub()
      ' BinaryFormatter is disabled.
End Sub)

Read the following topic for more information: Safe Deserialization.