Ajax.NET Professional (AjaxPro) Serialization and Deserialization Settings
What's new in 2021? Yes, I have finally worked on some important settings for client-side security options. Please check out ajaxpro.info for further details and latest source code.
Serialization settings
For security reasons, AjaxPro does not allow serialization/deserialization of arbitrary .NET classes in its default settings. Serialization support for individual classes or namespaces can be enabled within the "web.config", using the jsonDeserializationCustomTypes
setting:
<configuration> <ajaxNet> <ajaxSettings> <jsonDeserializationCustomTypes default="deny"> <allow>MyOwnNamespace.*</allow> </jsonDeserializationCustomTypes> </ajaxSettings> </ajaxNet> ... </configuration>