TypeFilterLevel Enumeration
Assembly: mscorlib (in mscorlib.dll)
.NET Framework remoting provides two levels of automatic deserialization, Low and Full. The Low deserialization level helps protect against deserialization attacks by deserializing only the types associated with the most basic remoting functionality. The Full deserialization level supports automatic deserialization of all types that remoting supports in all situations. For a list of the .NET Framework remoting types that Low and Full support, see Automatic Deserialization in .NET Framework Remoting.
You can set the members of this enumeration programmatically or by using an application configuration file. For examples, see Automatic Deserialization in .NET Framework Remoting.
Caution |
|---|
| Do not assume that controlling deserialization is the only security your application requires. In distributed applications, even a high degree of control over serialization might not prevent malicious clients from intercepting the communication and using it in some way, even if that is merely showing data to others. Therefore, although the Low deserialization level provides some protection against certain types of attack based upon automatic deserialization, you must still evaluate whether to use authentication and encryption to help protect the confidentiality of your data. |
Windows 98, Windows 2000 SP4, Windows Millennium Edition, Windows Server 2003, Windows XP Media Center Edition, Windows XP Professional x64 Edition, Windows XP SP2, Windows XP Starter Edition
The .NET Framework does not support all versions of every platform. For a list of the supported versions, see System Requirements.
Reference
System.Runtime.Serialization.Formatters NamespaceFilterLevel
BinaryServerFormatterSink.TypeFilterLevel Property
BinaryServerFormatterSinkProvider.TypeFilterLevel Property
SoapServerFormatterSink.TypeFilterLevel Property
SoapServerFormatterSinkProvider.TypeFilterLevel Property
Caution