Persist Security Info=false isn't respected

[roji]

With Microsoft.Data.SqlClient on netcoreapp3.1, the password is present in SqlConnection.ConnectionString after Open has been called. As per the docs, once Open is called, all security info is supposed to be stripped from the user-exposed connection string. System.Data.SqlClient behaves correctly. This can be seen with MS.Data.SqlClient versions 1.1.1 and 2.0.0-preview1.20021.1.

using System;
//using System.Data.SqlClient;
using Microsoft.Data.SqlClient;

namespace Test
{
    class Program
    {
        static void Main(string[] args)
        {
            var conn = new SqlConnection(@"Server=localhost;Database=test;User=SA;Password=Abcd5678;Persist Security Info=false");
            conn.Open();
            Console.WriteLine("Connection string: " + conn.ConnectionString);
            // With Microsoft.Data.SqlClient, outputs Server=localhost;Database=test;User=SA;Password=Abcd5678;Persist Security Info=false
            // With System.Data.SqlClient, outputs Server=localhost;Database=test;User=SA;Persist Security Info=false
        }
    }
}

[cheenamalhotra]

I confirm issue is reproducible in .NET Core with Microsoft.Data.SqlClient, while .NET Framework seems to be fine.