Merge pull request #48120 from sharwell/no-collision-resistance

Disable hash collision resistance for user data

src/Workspaces/Remote/Core/ServiceDescriptor.cs

@@ -58,7 +58,7 @@ protected override IJsonRpcMessageFormatter CreateFormatter()
             => ConfigureFormatter((MessagePackFormatter)base.CreateFormatter());
 
         private static readonly MessagePackSerializerOptions s_options = StandardResolverAllowPrivate.Options
-            .WithSecurity(MessagePackSecurity.UntrustedData)
+            .WithSecurity(MessagePackSecurity.UntrustedData.WithHashCollisionResistant(false))
             .WithResolver(CompositeResolver.Create(
                 MessagePackFormatters.GetFormatters(),
                 new IFormatterResolver[] { ImmutableCollectionMessagePackResolver.Instance, StandardResolverAllowPrivate.Instance }));