Settings.AllowSoapLayoutDeserialization Property

Specifies whether to enable deserialization from the SOAP format.

Namespace: DevExpress.XtraReports.Configuration

Assembly: DevExpress.XtraReports.v22.2.dll

NuGet Package: DevExpress.Reporting.Core

Declaration

C#

public bool AllowSoapLayoutDeserialization { get; set; }

VB.NET

Public Property AllowSoapLayoutDeserialization As Boolean

Property Value

Type	Description
Boolean	true, to enable SOAP format deserialization; otherwise, false.

Remarks

For security reasons, deserialization of report layouts (REPX files) and style sheets (REPSS files) stored in SOAP format is disabled. An exception is thrown on an attempt to load such a report or style sheet.

If you trust your report source, you can choose one of the following options:

Migrate to the XML format (recommended)

To avoid potential security threats, we strongly recommend that you migrate your reports and style sheets from the SOAP to XML format.

1. Temporarily enable the AllowSoapLayoutDeserialization option on application startup.
2. Open a report or style.

3. Save it to the XML format.

   C#

   DevExpress.XtraReports.Configuration.Default.AllowSoapLayoutDeserialization = true;
   
   XtraReport report = XtraReport.FromFile("Layout.repx", true);
   report.SaveLayoutToXml("Layout.repx");
   
   XtraReport reportStyles = new XtraReport();
   reportStyles.StyleSheet.LoadFromFile("Styles.repss");
   reportStyles.StyleSheet.SaveXmlToFile("Styles.repss");
   

   VB.NET

   DevExpress.XtraReports.Configuration.Default.AllowSoapLayoutDeserialization = True
   
   Dim report as XtraReport = XtraReport.FromFile("Layout.repx", True)
   report.SaveLayoutToXml("Layout.repx")
   
   Dim reportStyles as XtraReport = new XtraReport()
   reportStyles.StyleSheet.LoadFromFile("Styles.repss")
   reportStyles.StyleSheet.SaveXmlToFile("Styles.repss")
   

4. Once you migrate all the reports and style sheets, remove the line where you set the AllowSoapLayoutDeserialization property.

Allow SOAP format deserialization

If you fully trust your report source, you can enable the AllowSoapLayoutDeserialization property to suppress the exceptions.

C#

DevExpress.XtraReports.Configuration.Default.AllowSoapLayoutDeserialization = true;

VB.NET

DevExpress.XtraReports.Configuration.Default.AllowSoapLayoutDeserialization = True