Skip to main content
All docs
V22.2

Security Considerations

We recommend that you use an AntiForgery token if your application contains the editable ASPxDiagram control. This will help prevent a cross-site request forgery (CSRF) attack because the control synchronizes its data with the server.

Note that authorization mechanisms that allow you to deny access through Insecure Direct Object References (for example: example.com/app/SecureReport.aspx?id=1) do not protect you from CSRF attacks.

For more information, review the following topic: Preventing Cross-Site Request Forgery (CSRF).