dotnet / EntityFramework.Docs

Documentation for Entity Framework Core and Entity Framework 6
https://docs.microsoft.com/ef/
Creative Commons Attribution 4.0 International
1.63k stars 1.96k forks source link

Provide ROPC warning on connections strings per SFI learn.microsoft.com mandate #4809

Open Rick-Anderson opened 1 month ago

Rick-Anderson commented 1 month ago

Issue or suggestion

This issue is a copy of https://github.com/dotnet/AspNetCore.Docs/issues/33226

See the warning just above SQL Server Express LocalDB and follow see Secure authentication flows.

That's how we're handing potential ROPC risks. Ultimately customers will deploy apps to production. Most of the work is done in a few include files to choose from

dotnet_EntityFramework_Docs

CS effort for repos: dotnet_EntityFramework_Docs

For details see: SFI info in Teams

Rick-Anderson commented 1 month ago

@roji @ajcvickers @AndriySvyryd please review

AndriySvyryd commented 1 month ago

For EF6 pages consider putting a link to Entity Framework 6 SQL Server provider based on Microsoft.Data.SqlClient in the warning as using it is required to be able to follow the guidance.

I don't think that the warning is relevant on these pages:

AndriySvyryd commented 1 month ago

Related: