Add comment to clarify CodeQL validation for TraceContextBase serialization (#1350)

AnatoliB · web-flow · commit 769faa9c54ad · 2026-05-11T16:39:30.000-07:00
diff --git a/src/DurableTask.Core/TraceContextBase.cs b/src/DurableTask.Core/TraceContextBase.cs
@@ -41,6 +41,7 @@ static TraceContextBase()
         {
             CustomJsonSerializerSettings = new JsonSerializerSettings()
             {
+                // CodeQL [SM02211] Internal-only payload; Restore validates root $type is a TraceContextBase subclass.
                 TypeNameHandling = TypeNameHandling.Objects,
                 PreserveReferencesHandling = PreserveReferencesHandling.Objects,
                 ReferenceLoopHandling = ReferenceLoopHandling.Serialize,

Original file line number	Diff line number	Diff line change
`@@ -41,6 +41,7 @@ static TraceContextBase()`
`41`	`41`	`{`
`42`	`42`	`CustomJsonSerializerSettings = new JsonSerializerSettings()`
`43`	`43`	`{`
	`44`	`+ // CodeQL [SM02211] Internal-only payload; Restore validates root $type is a TraceContextBase subclass.`
`44`	`45`	`TypeNameHandling = TypeNameHandling.Objects,`
`45`	`46`	`PreserveReferencesHandling = PreserveReferencesHandling.Objects,`
`46`	`47`	`ReferenceLoopHandling = ReferenceLoopHandling.Serialize,`