Search Issue Tracker

Fixed

Fixed in 2020.3.47f1

Votes

0

Found in

2020.3.42f1

Issue ID

UUM-21711

Regression

No

web.config hard-coded login data still visible after the build

--

-

How to reproduce:
1. Open the project “IN_23460“
2. Press File → Build Settings → Build
3. In the project folder open “MonoBleedingEdge” → “etc” → “mono” → (2.0, 4.0, 4.5 for each folder) → “web.config”
4. Observe the config files

Expected result: “<!--<user name="changed" password="changed"/>-->” not visible
Actual result: “<!--<user name="changed" password="changed"/>-->” is visible

Reproducible with: 2020.3.0f1, 2020.3.42f1
Not reproducible with: 2021.3.0f1, 2021.3.15f1, 2022.1.23f1, 2022.2.0f1, 2023.1.0a21
Couldn’t test with: 2020.2.6f1 (due to compiler errors)

Reproducible on: Windows 10 Pro

Note: line “<!--<user name="changed" password="changed"/>-->” contains no real password and name so the real line will be different

  1. Resolution Note (fix version 2020.3.47f1):

    Backported changeset that removes hardcoded credentials from the web config files.

Add comment

Log in to post comment

All about bugs

View bugs we have successfully reproduced, and vote for the bugs you want to see fixed most urgently.