[wix-users] Logging password variables using WiX managed bootstrapper - A serious blocking issue

[Edwin Castro]

I would expect variable names to be case sensitive in a bundle just like
properties are in MSI. Mixed case and lower case properties are considered
"private" and cannot be overridden on the command line. PASSWORD, password,
PAssWord, and PassWorD are different properties and only one of them is
"public".

I would have expected burn variables to work similarly. I see the
documentation says that for a variable to be overridable you must set
Overridable="yes" so the case of the variable name doesn't matter here.
Unfortunately, the documentation doesn't indicate whether variable names
are case sensitive as they are in MSI.

The behavior you're seeing seems to indicate that they are treated as case
sensitive. That would suggest that your users will need to be specific
about case when specifying command line arguments.

--
Edwin G. Castro


On Wed, May 1, 2019 at 12:11 AM manogna reddy via wix-users <
wix-users at lists.wixtoolset.org> wrote:

> A small correction to the mentioned scenario
>
> When I try to pass the variable '*password'* from command line , value will
> be shown  in the  log file as below . In my scenario it should hide the
> variable value irrespective of case
>
>   *[61D0:39C0][2019-05-01T12:07:15]i009: Command Line:
> '"-burn.clean.room=Setup.exe" -burn.filehandle.attached=596
> -burn.filehandle.self=648 /s /i USERNAME=abc  password=12345'*
>
> On Wed, May 1, 2019 at 12:40 PM manogna reddy <manogna657 at gmail.com>
> wrote:
>
> > Hi,
> >
> > I have a variable declared in Bundle.wxs which stores the password
> >
> > *<Variable Name="PASSWORD" Persisted="yes" Hidden="yes"/>*
> >
> > When I try to pass the variable '*PASSWORD*' from command line , value
> > will be hidden as below which is working as expected
> >
> > *[61D0:39C0][2019-05-01T11:57:15]i009: Command Line:
> > '"-burn.clean.room=Setup.exe" -burn.filehandle.attached=596
> > -burn.filehandle.self=648 /s /i USERNAME=abc  PASSWORD=*****'*
> >
> > When I try to pass the variable '*password'* from command line , value
> > will be shown  in the  log file as below . In my scenario it should hide
> > the variable value irrespective of case
> >
> >   *[61D0:39C0][2019-05-01T12:07:15]i009: Command Line:
> > '"-burn.clean.room=Setup.exe" -burn.filehandle.attached=596
> > -burn.filehandle.self=648 /s /i USERNAME=abc  PASSWORD=12345'*
> >
> > *Is  there any way to achieve this? Because I can't force the users to
> > specify varaible name in specific format.*
> >
>
> ____________________________________________________________________
> WiX Toolset Users Mailing List provided by FireGiant
> http://www.firegiant.com/
>