1using System;
 2using System.IO;
 3using System.Runtime.Serialization;
 4using System.Runtime.Serialization.Formatters.Binary;
 5
 6namespace Serialize
 7{
 8    internal class Program
 9    {
10        static void Main(string[] args)
11        {
12            BinaryFormatter binaryFormatter = new BinaryFormatter();
13            MemoryStream memoryStream = new MemoryStream();
14            RCE calc = new RCE("calc");
15            binaryFormatter.Serialize(memoryStream, calc);
16
17
18            memoryStream.Position = 0;
19            binaryFormatter.Binder = new MyBinder();
20            object v = binaryFormatter.Deserialize(memoryStream);
21            Console.WriteLine(v);
22            Console.ReadKey();
23        }
24    }
25
26    [Serializable]
27    class RCE
28    {
29        public string cmd;
30
31        public RCE(string cmd)
32        {
33            this.cmd = cmd;
34        }
35
36        public override string ToString()
37        {
38            return $"exec cmd:{cmd}";
39        }
40    }
41    class MyBinder : SerializationBinder
42    {
43        public override Type BindToType(string assemblyName, string typeName)
44        {
45            Console.WriteLine($"assemblyName:{assemblyName},typeName:{typeName}.");
46            Type typeToDeserialize = Type.GetType(String.Format("{0}, {1}", typeName, assemblyName));
47
48            if (typeToDeserialize.Equals(typeof(RCE)))
49            {
50                //throw new Exception("can't deseriliza rce class.");
51                Console.WriteLine("can't deseriliza rce class.");
52                return null;
53            }
54            return typeToDeserialize;
55        }
56    }
57}