WorkflowDesigner
gadget
PropertyInspectorFontAndColorData is a write-only string whose setter runs XamlReader.Load on it (XmlResolver is null, so no XXE). The target needs System.Activities.Presentation and an STA thread.
Declared metadata, not a runtime result. How to read evidence.
.\ysonet.exe -g WorkflowDesigner -hTarget declarations
| Variant | Formatters | Inputs | Requirements | Runtime tokens |
|---|---|---|---|---|
| Default | Json.NET, Xaml, FastJson, JavaScriptSerializer, SharpSerializerXml, SharpSerializerBinary, MessagePackTypeless, MessagePackTypelessLz4 | command | built-in, wpf, net-framework | net-fx-4.0, net-fx-4.5, net-fx-4.5.1, net-fx-4.5.2, net-fx-4.6, net-fx-4.6.1, net-fx-4.6.2, net-fx-4.7, net-fx-4.7.1, net-fx-4.7.2, net-fx-4.8, net-fx-4.8.1 |
No module-specific options declared.
Credit: [Finders: Oleksandr Mirosh, Alvaro Munoz] [Contributors: Alvaro Munoz, Soroush Dalili, Dane Evans]