All docs
V20.2
21.2
21.1
20.2
20.1
19.2
The page you are viewing does not exist in version 19.2. This link will take you to the root page.
19.1
The page you are viewing does not exist in version 19.1. This link will take you to the root page.
18.2
The page you are viewing does not exist in version 18.2. This link will take you to the root page.
18.1
The page you are viewing does not exist in version 18.1. This link will take you to the root page.
17.2
The page you are viewing does not exist in version 17.2. This link will take you to the root page.
A newer version of this page is available. Switch to the current version.

Security Considerations

We recommend that you use AntiForgery token if your application contains the editable ASPxDiagram control to prevent a cross-site request forgery attack, because the control synchronizes its data with the server.

Note that authorization mechanisms that allow you to deny access through Insecure Direct Object References (for example: example.com/app/SecureReport.aspx?id=1) do not protect you from CSRF attacks.

For more information, review the following topic: Preventing Cross-Site Request Forgery (CSRF).