Browse by Tags

• .net 6
• .Net 7
• .NET 8
• .net 9
• .net core
• 2025
• access control
• accessibility
• Architecture
• ASP.NET
• asp.net Core
• authentication
• authorization
• Blazor
• C#
• Charts
• Dashboard
• Dashboards
• DevExtreme
• EF
• ef core
• Entity Framework
• Featured
• future
• installation
• installer
• localization
• MAUI
• non-Windows
• NuGet
• OData
• office
• Office File API
• rbac
• Reporting
• REST
• roadmap
• security
• survey
• universal
• usability
• v2011.2
• v24.2
• Web
• web api
• webapi
• WinForms
• WPF
• XAF
• XPO

Application Security — Documents Are Untrusted Input

A .docx is a ZIP file Open a .docx file in a hex editor and the first two bytes are PK . Every modern Office format - .docx , .xlsx , .pptx - is a ZIP archive of XML parts and embedded resources. PDF is not a ZIP file, but just like Office formats it...

Oliver Sturm (DevExpress)

29 May 2026

.NET .net core Architecture ASP.NET Blazor Office File API Reporting security WinForms WPF XAF

SBOMs for CRA Compliance in DevExpress-Based Apps — Preview Now Open

If you ship apps to customers in the EU, the Cyber Resilience Act (CRA) will require an SBOM as part of your conformity documentation. SBOM generation and CRA compliance are top priorities for DevExpress, and CycloneDX SBOM files for our .NET NuGet packages are now available as a preview...

Alex Chuev (DevExpress)

7 May 2026

.NET .net core CRA Featured JS npm NuGet SBOM security VCL

Application Security — Project Dependency "Version Bumps" Demystified or Modern Security Realities in .NET / NuGet Ecosystem

In this post, I want to show you how to effectively upgrade vulnerable third-party dependencies in your projects, highlight .NET industry best practices, and also clarify how DevExpress helps you mitigate security-related risks in general. For illustration...

Dennis Garavsky (DevExpress)

24 April 2026

.NET .net core JS npm NuGet security

Application Security — Stronger Hashes and Safer Passwords

Every application that stores passwords makes an implicit bet: that the hashing algorithm it chose will remain strong enough to resist attacks for as long as those hashes exist. It’s worth revisiting that bet regularly. This post walks through the reasoning...

Oliver Sturm (DevExpress)

17 April 2026

.NET .net core Architecture ASP.NET Blazor Dashboard Data Access Office File API Reporting security WinForms WPF XAF

Application Security — Why One Does Not Simply Protect a Data Store Connection String and Other Login Credentials?

A developer asks: “How do I protect my connection string in a desktop application?” This is one of the most common security questions in .NET development, and it sounds like it should have a straightforward answer. But there is a fundamental problem we...

Oliver Sturm (DevExpress)

2 April 2026

.NET .net core Architecture Backend Data Access database Desktop Frontend Middle Tier ORM RDBMS REST security webapi windows WinForms WPF

Microsoft Multilingual App Toolkit (MAT) Has Been Deprecated: What’s Next for DevExpress-Powered App Localization?

As you probably know, Microsoft Multilingual App Toolkit (MAT) support ended on October 15, 2025. Since MAT is no longer supported, this post documents localization-related alternatives available to the Microsoft developer community. What MAT Deprecation...

Dennis Garavsky (DevExpress)

1 April 2026

.NET .net core ASP.NET Blazor charting Dashboard DevExtreme Featured feedback future globalization JS localization office Reporting Roadmap Survey usability ux VCL WinForms WPF XAF

XAF (Cross-Platform .NET App UI & Web API Service) — June 2026 Roadmap (v26.1)

Thank you for choosing XAF (Cross-Platform .NET App UI & Web API Service) for your software development needs. This blog post outlines some of our XAF-related development plans for the first half of 2026 (v26.1, set for release in June 2026). First, if...

Dennis Garavsky (DevExpress)

3 March 2026

.NET .NET 10 .NET 8 .NET 9 .net core 2026 asp.net Core blazor EF Core Entity Framework future important changes roadmap v26.1 web api WinForms XAF

XAF (Cross-Platform .NET App UI & Web API Service) — Year-End Roadmap (v25.2)

EDIT : XAF v26.1 Roadmap This blog post outlines some of our XAF-related development plans for the second half of 2025 ( v25.2 ) and beyond. The announcement within this post is important and I don't wish to minimize its impact. My goal is to give everyone...

Dennis Garavsky (DevExpress)

15 August 2025

.NET .NET 10 .NET 8 .NET 9 .net core 2025 asp.net Core blazor EF Core Entity Framework future important changes roadmap v25.2 web api WinForms XAF

.NET Aspire Support For An XAF Blazor Project — Custom Telemetry, Service Orchestration, Database Dependency

In a recent blog post I described how an XAF Blazor project can be adjusted to support .NET Aspire. With a couple of changes to the startup logic, in both the standard XAF project template and the code added by the Aspire Visual Studio wizard, it became...

Oliver Sturm (DevExpress)

21 April 2025

.NET .NET 8 .net 9 .net core ASP.NET Core Aspire Blazor demo deployment Docker Linux lob non-Windows productivity rad SQL Server v24.2 Web XAF

XAF (Cross-Platform .NET App UI & Web API Service) — Early Access Preview (v25.1)

This post documents a few XAF -related features we expect to ship in early June and details what’s inside our Early Access Preview build. As you will note below, XAF-related focus areas remain Blazor, Entity Framework Core and Security. For additional...

Dennis Garavsky (DevExpress)

21 April 2025

.NET .net core 2025 accessibility asp.net Core blazor eap EF EF Core Entity Framework Non-Windows OData OpenAPI prerelease REST restful roadmap security survey Swagger Usability v25.1 web api XAF XPO