Skip to content

Release v2.1.2

Choose a tag to compare

@github-actions github-actions released this 04 Nov 04:48
e03ded6

Security

  • The serialization type filters registered by AddCratisChoreographySerializers() no longer allow a closed generic type outright. They allow only the plain types and generic type definitions they own, and Orleans then allows a closed generic type such as Result<string, JobId> only when each of its generic arguments is allowed as well. This applies to CratisTypesFilter, CratisJsonSerializer, OneOfSerializer, ConceptSerializer and LinqCollectionCopier. Payloads whose generic arguments are all allowed serialize as before.