diff --git a/eng/Versions.props b/eng/Versions.props index be46e3619b22a5fa100373f910bf316b5ec031e5..bc9a12b3e2bed7a84b64342d23e1df2211eabf80 100644 --- a/eng/Versions.props +++ b/eng/Versions.props @@ -242,7 +242,7 @@ <IdentityServer4PackageVersion>3.0.0</IdentityServer4PackageVersion> <IdentityServer4StoragePackageVersion>3.0.0</IdentityServer4StoragePackageVersion> <IdentityServer4EntityFrameworkStoragePackageVersion>3.0.0</IdentityServer4EntityFrameworkStoragePackageVersion> - <MessagePackPackageVersion>2.0.335</MessagePackPackageVersion> + <MessagePackPackageVersion>2.1.80</MessagePackPackageVersion> <MoqPackageVersion>4.10.0</MoqPackageVersion> <MonoCecilPackageVersion>0.10.1</MonoCecilPackageVersion> <NewtonsoftJsonBsonPackageVersion>1.0.2</NewtonsoftJsonBsonPackageVersion> diff --git a/src/SignalR/common/Protocols.MessagePack/src/Protocol/MessagePackHubProtocol.cs b/src/SignalR/common/Protocols.MessagePack/src/Protocol/MessagePackHubProtocol.cs index b42dcf7cfd3458bf8906b17a1a0a4c80e5d950b5..bd16161b0e6397dcc8cd2d67ad00f44518381430 100644 --- a/src/SignalR/common/Protocols.MessagePack/src/Protocol/MessagePackHubProtocol.cs +++ b/src/SignalR/common/Protocols.MessagePack/src/Protocol/MessagePackHubProtocol.cs @@ -54,6 +54,7 @@ namespace Microsoft.AspNetCore.SignalR.Protocol { var msgPackOptions = options.Value; SetupResolver(msgPackOptions); + _msgPackSerializerOptions.WithSecurity(MessagePackSecurity.UntrustedData); } private void SetupResolver(MessagePackHubProtocolOptions options) @@ -64,7 +65,6 @@ namespace Microsoft.AspNetCore.SignalR.Protocol { var resolver = CompositeResolver.Create(Array.Empty<IMessagePackFormatter>(), (IReadOnlyList<IFormatterResolver>)options.FormatterResolvers); _msgPackSerializerOptions = MessagePackSerializerOptions.Standard.WithResolver(resolver); - return; }