diff --git a/ExaArray/ExaArray1D.cs b/ExaArray/ExaArray1D.cs
index c837fbf..753f86e 100644
--- a/ExaArray/ExaArray1D.cs
+++ b/ExaArray/ExaArray1D.cs
@@ -226,9 +226,13 @@ namespace Exa
#region Store and load
///
- /// Stores the exa array into a stream.
+ /// Stores the exa array into a stream. Please read the remarks regarding security issues.
///
///
+ /// The data stored in this way should never be part of a public API. Serializing and
+ /// deserializing is not secure: an attacker can manipulate the data in a targeted
+ /// manner to compromise the API server, etc.
+ ///
/// This method does not dispose the stream.
///
public void Store(Stream outputStream)
@@ -238,9 +242,13 @@ namespace Exa
}
///
- /// Restores an exa array from the given stream.
+ /// Restores an exa array from the given stream. Please read the remarks regarding security issues.
///
///
+ /// The data loaded in this way should never be part of a public API. Serializing and
+ /// deserializing is not secure: an attacker can manipulate the data in a targeted
+ /// manner to compromise the API server, etc.
+ ///
/// This method does not dispose the stream.
///
public static ExaArray1D Restore(Stream inputStream)
diff --git a/ExaArray/ExaArray2D.cs b/ExaArray/ExaArray2D.cs
index 6c61b90..ea94eea 100644
--- a/ExaArray/ExaArray2D.cs
+++ b/ExaArray/ExaArray2D.cs
@@ -8,6 +8,7 @@ namespace Exa
///
/// The two-dimensional exa-scale array. Can grow up to 18,446,744,073,709,551,615 elements in total.
///
+ [Serializable]
public sealed class ExaArray2D : ISerializable
{
///
@@ -86,9 +87,13 @@ namespace Exa
#region Store and load
///
- /// Stores the exa array into a stream.
+ /// Stores the exa array into a stream. Please read the remarks regarding security issues.
///
///
+ /// The data stored in this way should never be part of a public API. Serializing and
+ /// deserializing is not secure: an attacker can manipulate the data in a targeted
+ /// manner to compromise the API server, etc.
+ ///
/// This method does not dispose the stream.
///
public void Store(Stream outputStream)
@@ -98,9 +103,13 @@ namespace Exa
}
///
- /// Restores an exa array from the given stream.
+ /// Restores an exa array from the given stream. Please read the remarks regarding security issues.
///
///
+ /// The data loaded in this way should never be part of a public API. Serializing and
+ /// deserializing is not secure: an attacker can manipulate the data in a targeted
+ /// manner to compromise the API server, etc.
+ ///
/// This method does not dispose the stream.
///
public static ExaArray2D Restore(Stream inputStream)