Skip to main content

Settings.AllowSoapLayoutDeserialization Property

Specifies whether to enable deserialization from the SOAP format.

Namespace: DevExpress.XtraReports.Configuration

Assembly: DevExpress.XtraReports.v22.2.dll

NuGet Package: DevExpress.Reporting.Core


public bool AllowSoapLayoutDeserialization { get; set; }

Property Value

Type Description

true, to enable SOAP format deserialization; otherwise, false.


For security reasons, deserialization of report layouts (REPX files) and style sheets (REPSS files) stored in SOAP format is disabled. An exception is thrown on an attempt to load such a report or style sheet.

If you trust your report source, you can choose one of the following options:

Migrate to the XML format (recommended)

To avoid potential security threats, we strongly recommend that you migrate your reports and style sheets from the SOAP to XML format.

  1. Temporarily enable the AllowSoapLayoutDeserialization option on application startup.
  2. Open a report or style.
  3. Save it to the XML format.

    DevExpress.XtraReports.Configuration.Default.AllowSoapLayoutDeserialization = true;
    XtraReport report = XtraReport.FromFile("Layout.repx", true);
    XtraReport reportStyles = new XtraReport();
  4. Once you migrate all the reports and style sheets, remove the line where you set the AllowSoapLayoutDeserialization property.

Allow SOAP format deserialization

If you fully trust your report source, you can enable the AllowSoapLayoutDeserialization property to suppress the exceptions.

DevExpress.XtraReports.Configuration.Default.AllowSoapLayoutDeserialization = true;
See Also