Open Bod9001 opened 8 months ago
https://learn.microsoft.com/en-gb/dotnet/standard/serialization/binaryformatter-security-guide
I did notice this was used in the project here and here, and looks like it could be relatively easily exploited to send malicious packets to the server/other clients, best to swap it out for something else.
Oh wow. Thanks for this @Bod9001 I'm in the middle of a big refactor of univoice so I'll keep this in mind
https://learn.microsoft.com/en-gb/dotnet/standard/serialization/binaryformatter-security-guide
I did notice this was used in the project here and here, and looks like it could be relatively easily exploited to send malicious packets to the server/other clients, best to swap it out for something else.