Readobject() function flags an json injection fortify issue.

See more:

C#3.5

Code :

var ser = new DataContractJsonSerializer(type);
return ser.ReadObject(new MemoryStream(ASCIIEncoding.ASCII.GetBytes(objectStream)));

In above code, ReadObject() function flags an JSON Injection.

And it is recommended that, Ensure that all serialization to JSON is performed using a safe serialization function that delimits untrusted data within single or double quotes and escapes any special characters.

Can some body help to work on it.

What I have tried:

I tried by using overloaded constructor of "DataContractJsonSerializer".