[wix-users] Logging password variables using WiX managed bootstrapper - A serious blocking issue

[manogna reddy]

Hi Edwin

Thanks for the reply .But the users are concerned with password getting
exposed if the case of the variable differs .Is there any way to remove
logging of the below command line from the log file

On Wed, May 1, 2019 at 2:12 PM Edwin Castro <egcastr at gmail.com> wrote:

> I would expect variable names to be case sensitive in a bundle just like
> properties are in MSI. Mixed case and lower case properties are considered
> "private" and cannot be overridden on the command line. PASSWORD, password,
> PAssWord, and PassWorD are different properties and only one of them is
> "public".
>
> I would have expected burn variables to work similarly. I see the
> documentation says that for a variable to be overridable you must set
> Overridable="yes" so the case of the variable name doesn't matter here.
> Unfortunately, the documentation doesn't indicate whether variable names
> are case sensitive as they are in MSI.
>
> The behavior you're seeing seems to indicate that they are treated as case
> sensitive. That would suggest that your users will need to be specific
> about case when specifying command line arguments.
>
> --
> Edwin G. Castro
>
>
> On Wed, May 1, 2019 at 12:11 AM manogna reddy via wix-users <
> wix-users at lists.wixtoolset.org> wrote:
>
>> A small correction to the mentioned scenario
>>
>> When I try to pass the variable '*password'* from command line , value
>> will
>> be shown  in the  log file as below . In my scenario it should hide the
>> variable value irrespective of case
>>
>>   *[61D0:39C0][2019-05-01T12:07:15]i009: Command Line:
>> '"-burn.clean.room=Setup.exe" -burn.filehandle.attached=596
>> -burn.filehandle.self=648 /s /i USERNAME=abc  password=12345'*
>>
>> On Wed, May 1, 2019 at 12:40 PM manogna reddy <manogna657 at gmail.com>
>> wrote:
>>
>> > Hi,
>> >
>> > I have a variable declared in Bundle.wxs which stores the password
>> >
>> > *<Variable Name="PASSWORD" Persisted="yes" Hidden="yes"/>*
>> >
>> > When I try to pass the variable '*PASSWORD*' from command line , value
>> > will be hidden as below which is working as expected
>> >
>> > *[61D0:39C0][2019-05-01T11:57:15]i009: Command Line:
>> > '"-burn.clean.room=Setup.exe" -burn.filehandle.attached=596
>> > -burn.filehandle.self=648 /s /i USERNAME=abc  PASSWORD=*****'*
>> >
>> > When I try to pass the variable '*password'* from command line , value
>> > will be shown  in the  log file as below . In my scenario it should hide
>> > the variable value irrespective of case
>> >
>> >   *[61D0:39C0][2019-05-01T12:07:15]i009: Command Line:
>> > '"-burn.clean.room=Setup.exe" -burn.filehandle.attached=596
>> > -burn.filehandle.self=648 /s /i USERNAME=abc  PASSWORD=12345'*
>> >
>> > *Is  there any way to achieve this? Because I can't force the users to
>> > specify varaible name in specific format.*
>> >
>>
>> ____________________________________________________________________
>> WiX Toolset Users Mailing List provided by FireGiant
>> http://www.firegiant.com/
>>
>