Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

CodeQL: Usage of Newtonsoft.Json.TypeNameHandling.All considered unsafe #278

Open
cgillum opened this issue Oct 16, 2024 · 0 comments
Open
Labels
P1 Priority 1

Comments

@cgillum
Copy link
Member

cgillum commented Oct 16, 2024

This is a CodeQL issue. CodeQL tracking item can be found here.

More information on how to fix the issue here.

We can't simply use TypeNameHandling.None because that would be a breaking change, preventing exceptions from being deserialized. However, there are other workarounds that can be considered, as noted in the above informational link.

@cgillum cgillum added the P1 Priority 1 label Oct 16, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
P1 Priority 1
Projects
None yet
Development

No branches or pull requests

1 participant