I literally was just about to pose this same question to this DL today. :) My take is there needs to be a SecureStringVariables in the Engine.
John Wintellect http://www.wintellect.com +1-877-968-5528 -----Original Message----- From: Vadym Verba [mailto:vve...@sdl.com] Sent: Tuesday, May 10, 2011 7:15 AM To: wix-users@lists.sourceforge.net Subject: [WiX-users] Burn: secure Bundle Variables Hello. I want to gather user password using BA and pass it to msi package, so I create Bundle variable and use it in MsiPackage: <Variable Name="my_password" Value="blablabla" Type="string"/> <MsiPackage Id='my' SourceFile="my.msi" Cache="no" Vital="yes"> <MsiProperty Name="MY_PASSWORD" Value="[my_password]"/> </MsiPackage> MainWindow.Model.Engine.StringVariables["my_password"] = "new_blablabla"; The problem is when this variable is initialized or changed in BA, it is written in log file unprotected: --- Initializing string variable 'my_password ' to value ' blablabla' --- Is there any workaround to make this more secure? Best regards, Vadym. </pre> <BR style="font-size:4px;"> <a href = "http://www.sdl.com/sdl-vision"><img src="http://www.sdl.com/images/email_new_logo.png" alt="www.sdl.com/sdl-vision" border="0"/></a> <BR> <font face="arial" size="2"><a href ="http://www.sdl.com/sdl-vision" style="color:005740; font-weight: bold">www.sdl.com/sdl-vision</a></font> <BR> <BR> <font face="arial" size="1" color="#736F6E"> <b>SDL PLC confidential, all rights reserved.</b> If you are not the intended recipient of this mail SDL requests and requires that you delete it without acting upon or copying any of its contents, and we further request that you advise us.<BR> SDL PLC is a public limited company registered in England and Wales. Registered number: 02675207.<BR> Registered address: Globe House, Clivemont Road, Maidenhead, Berkshire SL6 7DY, UK. </font> ------------------------------------------------------------------------------ Achieve unprecedented app performance and reliability What every C/C++ and Fortran developer should know. Learn how Intel has extended the reach of its next-generation tools to help boost performance applications - inlcuding clusters. http://p.sf.net/sfu/intel-dev2devmay _______________________________________________ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users ------------------------------------------------------------------------------ Achieve unprecedented app performance and reliability What every C/C++ and Fortran developer should know. Learn how Intel has extended the reach of its next-generation tools to help boost performance applications - inlcuding clusters. http://p.sf.net/sfu/intel-dev2devmay _______________________________________________ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users