oyzar

Great to hear someone is working on this. Hope it's feasible to figure out a solution for this.

While FluentNhibernate's use of BinaryFormater is more obvious as it fails on startup, the usages in NHibernate should still be changed. It's used in 5 places: NHibernate.Type.SerializableType.FromBytes NHibernate.Type.SerializableType.ToBytes NHibernate.Util.SerializationHelper.CreateFormatter NHibernate.Util.SerializationHelper.Deserialize...

It would be better to change to an implementation that doesn't use an unsafe part of the .net API. There are alternatives listed here: https://aka.ms/binaryformatter are none of those possible...