Page 1 of 1

password in clear text

Posted: Sun 26 Aug 2018 22:09
by ssnz
Hi All


I'm using windows 10 version 1803, Entity Developer 6.3.555, Postgres 10.4

I use Entity developer and have observed that the code it produces can contain the database password in clear text. I include my data context in source control and would prefer not to have the password present there in clear text.

Steps to reproduce:
1) open an existing model in Entity Developer
2) Right click on the Data Context in the Model explorer
3) Select update model from database
4) Click next
5) enter password, ensuring that "Allow Saving Password" checkbox is not ticked
6) Click Next (3 times) click finish
7) click the save button
8) ...
9) Click Generate Code
Observe that the .designer.cs includes your password, in clear text.

Work Around
Repeat steps 1-10 but include the step:
8) In Entity Developer, close and reopen the model before completing step 9
Observe that your password is no longer present in the .designer.cs file.

Why does entity developer need me to close and reopen the model to avoid saving the password in clear text?

Thanks

Re: password in clear text

Posted: Tue 28 Aug 2018 15:17
by Shalex
We have reproduced the issue and will notify you when it is fixed.

Re: password in clear text

Posted: Fri 31 Aug 2018 19:00
by Shalex
The bug with setting password as clear text in connection string when "Persist Security Info=False;" is fixed: viewtopic.php?f=3&t=37639.

Re: password in clear text

Posted: Wed 05 Sep 2018 23:45
by ssnz
Thanks Shalex, it's working perfectly for me now