From cea945a48fe9f272c10fa5980e2702d5b2124c14 Mon Sep 17 00:00:00 2001 From: Andrew Arnott Date: Thu, 21 May 2026 14:25:38 -0600 Subject: [PATCH 1/2] Add several known unsafe 'gadgets' to the disallow list Thanks to @svenclaesson for calling these types out as valuable to block by default. --- src/MessagePack/MessagePackSerializerOptions.cs | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/src/MessagePack/MessagePackSerializerOptions.cs b/src/MessagePack/MessagePackSerializerOptions.cs index dc4598239..8249dbcdf 100644 --- a/src/MessagePack/MessagePackSerializerOptions.cs +++ b/src/MessagePack/MessagePackSerializerOptions.cs @@ -24,14 +24,25 @@ public class MessagePackSerializerOptions /// private static readonly HashSet DisallowedTypes = new HashSet { + "Microsoft.VisualStudio.Text.Formatting.TextFormattingRunProperties", + "System.CodeDom.Compiler.CompilerResults", "System.CodeDom.Compiler.TempFileCollection", + "System.Configuration.SettingsPropertyValue", + "System.Data.DataSet", + "System.Data.DataTable", + "System.Diagnostics.Process", + "System.Diagnostics.ProcessStartInfo", + "System.Drawing.Design.ToolboxItemContainer", "System.IdentityModel.Tokens.SessionSecurityToken", "System.Management.IWbemClassObjectFreeThreaded", "System.Security.Claims.ClaimsIdentity", + "System.Security.Claims.ClaimsPrincipal", "System.Security.Principal.WindowsIdentity", + "System.Security.Principal.WindowsPrincipal", "System.Web.Security.RolePrincipal", "System.Windows.Data.ObjectDataProvider", "System.Windows.ResourceDictionary", + "System.Workflow.ComponentModel.Serialization.ActivitySurrogateSelector", }; #if !DYNAMICCODEDUMPER From 3a020c238ad98c9d737c7dee8b8c091097ebcec8 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Thu, 21 May 2026 21:06:21 +0000 Subject: [PATCH 2/2] feat: Update package.json to 3.1.6 Commit by [GitHub Actions](https://github.com/MessagePack-CSharp/MessagePack-CSharp/actions/runs/26253102878) --- .../Assets/Scripts/MessagePack/package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/MessagePack.UnityClient/Assets/Scripts/MessagePack/package.json b/src/MessagePack.UnityClient/Assets/Scripts/MessagePack/package.json index 23ec4fe5f..d1e46f1a1 100644 --- a/src/MessagePack.UnityClient/Assets/Scripts/MessagePack/package.json +++ b/src/MessagePack.UnityClient/Assets/Scripts/MessagePack/package.json @@ -1,7 +1,7 @@ { "name": "com.github.messagepack-csharp", "displayName": "MessagePack", - "version": "3.1.5", + "version": "3.1.6", "unity": "2021.3", "description": "Extremely Fast MessagePack Serializer for C#.", "keywords": [