NEW3.03.05.15 · Released 26 February 2021
High Importance
Breaking Change
NEWfinPOWER Connect WS
Released in
3.03.05.15
26 February 2021
- Opened18 Jan
- Closed19 Jan
- Released26 Feb
Article 17748
Job J025781
Security Review; All database errors are now obfuscated
Any database errors returned from Web Services (this includes finPOWER Connect Cloud and Portals) are now obfuscated.
Since we have no control over the information returned in an error message such as one returned from MS SQL Server, this could potentially cause information about the database to be returned to the end user.
All database-related errors (exceptions) are now obfuscated and will return a message similar to one of the following: "An MS SQL Server exception occurred but details are not available." "MS SQL Server exception '#123' occurred but details are not available."
The full exception message is written to the Trace log (finBL.Trace object).