[wix-users] Hide values of some parameters in the wix log

[Aleksey Kondratov]

Thanks, Sean,

upgrading WIX to 3.10 fixed the problem.


________________________________
From: wix-users <wix-users-bounces at lists.wixtoolset.org> on behalf of Sean Hall <r.sean.hall at gmail.com>
Sent: Thursday, January 26, 2017 9:12 PM
To: WiX Toolset Users Mailing List
Subject: Re: [wix-users] Hide values of some parameters in the wix log

This was fixed in v3.10 (https://github.com/wixtoolset/issues/issues/4731).
[https://avatars1.githubusercontent.com/u/7120850?v=3&s=400]<https://github.com/wixtoolset/issues/issues/4731>

Sensitive data is not hidden in command line dump in log ...<https://github.com/wixtoolset/issues/issues/4731>
github.com
There is Hidden attribute for bundle variables which hides sensitive data in log file, but not when they come from command line: Burn v3.9.1006.0, Windows v6.1 (Build ...



You should upgrade as soon as possible to v3.10.3 for the security fixes,
anyway.

On Thu, Jan 26, 2017 at 6:50 AM, Aleksey Kondratov <
alex.kondratov at hotmail.com> wrote:

>
> Hello  guys,
>
>
> I have a bundle wix project. I'm running it in command line in silent mode
> - e.g.
>
>
> project.exe User={user} UserPassword={userPassword} -s -l output.log
>
>
> The value {userPassword} is hidden in the project:
>
>
>  <Variable Name="userPassword" Type="string" Value=""
> bal:Overridable="yes" Hidden="yes" Persisted="yes"/>
>
>
> but the first line in the log output.log contains all variables in plain
> text:
>
>
> Burn v3.9.1208.0, Windows v6.1 (Build 7601: Service Pack 1), path:
> Project.exe, cmdline: 'ServiceUser=user UserPassword=password -s -l
> prizm-output.log' Initializing string variable 'InstallFolder' to value
> 'C:\Prizm'
> Initializing string variable 'ServiceUser' to value ''
> Initializing hidden variable 'UserPassword'
> ...
>
>
> Further hiding of the variable works well, the issue is just in the first
> line in log
>
>
> So the question is - does it exist a way to remove the first line from the
> log or hide the value of the UserPassword variable there?
>
>
> Thanks...
>
> --
> Alex
>
> ____________________________________________________________________
> WiX Toolset Users Mailing List provided by FireGiant
> http://www.firegiant.com/
WiX Support | WiX Experts and Resources from FireGiant<http://www.firegiant.com/>
www.firegiant.com
WiX Support | Installation, Development, Deployment | WiX Experts and Resources from FireGiant



>

____________________________________________________________________
WiX Toolset Users Mailing List provided by FireGiant http://www.firegiant.com/
WiX Support | WiX Experts and Resources from FireGiant<http://www.firegiant.com/>
www.firegiant.com
WiX Support | Installation, Development, Deployment | WiX Experts and Resources from FireGiant