Security Considerations

• Jun 03, 2025

DevExpress .NET controls include mechanisms designed to reduce security-related risks. Use the following features to improve the overall security posture of your DevExpress-powered ASP.NET Web Forms app:

• Authorization Logic
  • Authorization Logic — Dashboard
  • Authorization Logic — Reports
  • Authorization Logic — Query Builder
• HTML Encoding
• Safe Deserialization
• Content Security Policy
• Callback State Encryption
• View State Encryption
• Validate User Input
• Secure File Upload
  • Control Access to Server Files
  • Prevent Disk Space Exhaustion
  • Validate Uploaded Files
• Prevent Unauthorized Operations
• Prevent Cross-Site Request Forgery Attacks (CSRF)
• Prevent Against CSV Injection Attacks
• Prevent Exposure of Sensitive Information
• Suppress Control Requests to Download Data from External URLs
• Suppress New Processes Initiated by .NET Controls

General Information

The following topic addresses a series of frequently asked security-related questions and includes links to Best Practice articles for various development platforms and products.

Security — What You Need to Know

See Also

• BI Dashboard — Security Considerations
• Reporting — Security Considerations