Urgent.News

What's breaking now, across thousands of outlets.

Tech

Obfuscating a Polymorphic JSON Contract: Why [JsonDerivedType] Survives Renaming and TypeNameHandling Does Not

Property-level renaming breaks are annoying but shallow: a key comes out wrong, you pin it with [JsonPropertyName] , done. Polymorphic serialization is a deeper hazard, because the thing that goes on the wire is not a property name — it is the identity of the type itself . Obfuscation exists to destroy that identity. So a polymorphic contract is exactly the place where "renaming broke…

Renaming does not impact System.Text.Json's [JsonDerivedType] serialization, whereas Newtonsoft's TypeNameHandling does. With System.Text.Json, the wire format remains unchanged even after type renaming. To obfuscate a type hierarchy without relying on a single name, use opaque, intentional discriminators chosen as a wire vocabulary, rather than deriving them from the identifier. This approach ensures that even after obfuscation, the wire format remains identical and can be deserialized without issue.

Written by urgent.news from Dev.to's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.

Read the original at dev.to →

More in Tech

N-central vulnerabilities (Able2Shell): what MSPs should do now

This article first appeared on varaxontech.com , where it is kept up to date. The short version On 8 to 9 November 2026 a researcher published working exploit code for flaws in N-able N-central .

  • N-able released exploit code for N-central vulnerabilities on November 8-9, 2026.
  • Seven vulnerabilities addressed in Hotfix 2 (build 2026.4.1.26) released on November 10.
  • Legacy API must be disabled to mitigate latest threats, per N-able's recommendation.

Ogun to host tech summit

Technology stakeholders will converge on Abeokuta for the 7th Ogun Digital Summit, with calls for a dedicated Ministry of Communications and Digital Econom Read More…

More from Saturday 14 November →