security vulnerability
I noticed I can do the following below and it shows the password in my connection string.
string sConnection = Util.GetMyQueries().First().GetConnectionInfo().DatabaseInfo.GetCxString();
sConnection.Dump();
I would prefer it did not do this.
3
votes
-
It's not possible to prevent programmatic access to the connection string or password. This is because the connection itself needs the full connection string in order to operate. Note that this does not mean that unencrypted password is stored in the .linq file.