From 9ea2cbda65d63b8a68e42958de06adc11765ceb1 Mon Sep 17 00:00:00 2001 From: Christoph Bergmeister Date: Mon, 25 Jul 2022 13:49:55 +0100 Subject: [PATCH] Set MaxDepth in JsonSerializerSettings for more secure handling of exceptional conditions in Newtonsoft.Json --- .../Retrieval/JsonProfileSerializer.cs | 1 + 1 file changed, 1 insertion(+) diff --git a/PSCompatibilityCollector/Microsoft.PowerShell.CrossCompatibility/Retrieval/JsonProfileSerializer.cs b/PSCompatibilityCollector/Microsoft.PowerShell.CrossCompatibility/Retrieval/JsonProfileSerializer.cs index 85ed9b82d..27d2e298b 100644 --- a/PSCompatibilityCollector/Microsoft.PowerShell.CrossCompatibility/Retrieval/JsonProfileSerializer.cs +++ b/PSCompatibilityCollector/Microsoft.PowerShell.CrossCompatibility/Retrieval/JsonProfileSerializer.cs @@ -84,6 +84,7 @@ public static JsonProfileSerializer Create(Formatting formatting) Converters = GetFormatConverters(), MissingMemberHandling = MissingMemberHandling.Ignore, DefaultValueHandling = DefaultValueHandling.IgnoreAndPopulate, + MaxDepth = 128, }; var serializer = JsonSerializer.Create(settings);