- Launchpad ##332168: Connection.py: do not expose DB connection strings

  through exceptions

doc/CHANGES.txt

@@ -27,6 +27,9 @@ Zope Changes
 
     Bugs fixed
 
+      - Launchpad ##332168: Connection.py: do not expose DB connection strings
+        through exceptions
+
       - LP/#143873: Fixed problems when no HTTP_ACCEPT_CHARSET is in the
         request. This required an update of zope.publisher to 3.3.3.
 

lib/python/Shared/DC/ZRDB/Connection.py

@@ -191,9 +191,9 @@ class Connection(
             except:
                 t, v, tb = sys.exc_info()
                 raise BadRequest, (
-                    '<strong>Invalid connection string: </strong><CODE>%s</CODE><br>\n'
+                    '<strong>Error connecting to DB.</strong><br>\n'
                     '<!--\n%s\n%s\n-->\n'
-                    % (s,t,v)), tb
+                    % (t,v)), tb
         finally: tb=None
         self._v_connected=DateTime()