|Title:||Password in ConnectionString is visible in Trace|
|Last Modified:||2018-12-23 05:02:00|
|Version Found In:||126.96.36.199|
anonymous added on 2018-12-15 20:56:28:
When using Password=abc; in the ConnectionString, if the ConnectionString is displayed in a Trace it contains the visible password.
mistachkin added on 2018-12-16 19:29:58:
This can be changed as long as masking the password is controlled by a connection flag that is disabled by default (i.e. for backward compatibility).
mistachkin added on 2018-12-23 05:02:00:
Fixed on trunk via check-in [02ed8cae60ffa75c]. Using the new "HidePassword" connection flag will attempt to prevent the password from showing up -OR- being saved anywhere that is not needed.