#9291 Add [NonDebuggable] to Cryptography Management encrypt/decrypt procedures
The Cryptography Management system application now marks all encryption and decryption procedures with the NonDebuggable attribute to prevent AL debugger access to sensitive cleartext data.
- 2files
- 2AL files
- 2objects
Pull request · merged into main (BC30) on 2026-07-10 by PooyaKharamesh · 2 files (+4 -0), 2 AL · fix · tier official · reviewed (checked by Opus)
What changed
- Four procedures in Cryptography Management codeunits receive the NonDebuggable attribute
- EncryptText, Encrypt, and Decrypt procedures are now protected from debugger inspection
- Prevents extraction of cleartext input and return values when procedures return Text instead of SecretText
- Maintains confidentiality of encrypted and decrypted data
- Follows existing System Application conventions for attribute placement
- Behaviour changes for users or extensions.
AL objects touched
- Codeunit 1266 “Cryptography Management”, System Application: modified
- Codeunit 1279 “Cryptography Management Impl.”, System Application: modified
Context
- Work items: AB#641977
- Labels: AL: System Application
- Systems: administration
- From the description: “Added [NonDebuggable] to all four affected procedures”
Source: metadata of a merged pull request in microsoft/BCApps (bcapps): title, labels, changed paths and counts, with a summary in our words. No source text and no description beyond one short quote (D10, D61).