I literally was just about to pose this same question to this DL today. :) My 
take is there needs to be a SecureStringVariables in the Engine.

John
Wintellect
http://www.wintellect.com
+1-877-968-5528

-----Original Message-----
From: Vadym Verba [mailto:vve...@sdl.com] 
Sent: Tuesday, May 10, 2011 7:15 AM
To: wix-users@lists.sourceforge.net
Subject: [WiX-users] Burn: secure Bundle Variables

Hello.

 

I want to gather user password using BA and pass it to msi package, so I create 
Bundle variable and use it in MsiPackage:

<Variable Name="my_password" Value="blablabla" Type="string"/>

<MsiPackage Id='my' SourceFile="my.msi" Cache="no" Vital="yes">

                <MsiProperty Name="MY_PASSWORD" Value="[my_password]"/>

</MsiPackage>

MainWindow.Model.Engine.StringVariables["my_password"] = "new_blablabla";

The problem is when this variable is initialized or changed in BA, it is 
written in log file unprotected:

--- Initializing string variable 'my_password ' to value ' blablabla' ---

Is there any workaround to make this more secure?

 

Best regards,

Vadym.

 

</pre>
<BR style="font-size:4px;">
<a href = "http://www.sdl.com/sdl-vision";><img 
src="http://www.sdl.com/images/email_new_logo.png"; alt="www.sdl.com/sdl-vision" 
border="0"/></a> <BR> <font face="arial"  size="2"><a href 
="http://www.sdl.com/sdl-vision"; style="color:005740; font-weight: 
bold">www.sdl.com/sdl-vision</a></font>
<BR>
<BR>
<font face="arial"  size="1" color="#736F6E"> <b>SDL PLC confidential, all 
rights reserved.</b> If you are not the intended recipient of this mail SDL 
requests and requires that you delete it without acting upon or copying any of 
its contents, and we further request that you advise us.<BR> SDL PLC is a 
public limited company registered in England and Wales.  Registered number: 
02675207.<BR> Registered address: Globe House, Clivemont Road, Maidenhead, 
Berkshire SL6 7DY, UK.
</font>
------------------------------------------------------------------------------
Achieve unprecedented app performance and reliability What every C/C++ and 
Fortran developer should know.
Learn how Intel has extended the reach of its next-generation tools to help 
boost performance applications - inlcuding clusters.
http://p.sf.net/sfu/intel-dev2devmay
_______________________________________________
WiX-users mailing list
WiX-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/wix-users

------------------------------------------------------------------------------
Achieve unprecedented app performance and reliability
What every C/C++ and Fortran developer should know.
Learn how Intel has extended the reach of its next-generation tools
to help boost performance applications - inlcuding clusters.
http://p.sf.net/sfu/intel-dev2devmay
_______________________________________________
WiX-users mailing list
WiX-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/wix-users

Reply via email to