Skip to main content
A newer version of this page is available. .

Security Considerations

We recommend that you use an AntiForgery token if your application contains the editable ASPxDiagram control. This will help prevent a cross-site request forgery (CSRF) attack because the control synchronizes its data with the server.

Note that authorization mechanisms that allow you to deny access through Insecure Direct Object References (for example: example.com/app/SecureReport.aspx?id=1) do not protect you from CSRF attacks.

For more information, review the following topic: Preventing Cross-Site Request Forgery (CSRF).