web
You’re offline. This is a read only version of the page.
close
Skip to main content

Announcements

Community site session details

Community site session details

Session Id :
Power Platform Community / Forums / Power Apps / SQL Injection: Prevent...
Power Apps
Suggested Answer

SQL Injection: Preventing Sensitive Data Exposure in PowerApps - Masking Headers: x-ms-request-url

(0) ShareShare
ReportReport
Posted on by 26
I’m working on securing PowerApps connections to SQL databases but noticed sensitive information like x-ms-request-url could potentially be exposed, raising concerns about SQL injection risks. While PowerApps is known for its security, I believe there must be a way to prevent these headers from being exposed. Has anyone used Azure API Management (APIM) or Content Security Policy (CSP) for masking headers or preventing potential vulnerabilities? Any suggestions or best practices would be greatly appreciated!

sqlInjection.png
Categories:
I have the same question (0)
  • Suggested answer
    SaiRT14 Profile Picture
    1,990 Super User 2025 Season 1 on at
    Here are the best practices:
     
    APIM acts as a gateway between your PowerApps and SQL databases, enabling you to control, mask, or block sensitive headers.
    Ensure that SQL queries in PowerApps, especially in custom connectors or flows, use parameterized queries:
    Instead of storing connection credentials, use Azure Managed Identity to authenticate PowerApps with SQL databases.
    Ensure SQL endpoints are only accessible from trusted IP ranges or services like APIM.
     
     

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

Introducing the 2026 Season 1 community Super Users

Congratulations to our 2026 Super Users!

Kudos to our 2025 Community Spotlight Honorees

Congratulations to our 2025 community superstars!

Leaderboard > Power Apps

#1
WarrenBelz Profile Picture

WarrenBelz 105 Most Valuable Professional

#2
Haque Profile Picture

Haque 77

#3
VASANTH KUMAR BALMADI Profile Picture

VASANTH KUMAR BALMADI 70

Last 30 days Overall leaderboard