This method only hides the value of the property when it is directly printed in the log file. If you pass the property to a deferred custom action, it will be visible in plain text once again in the custom action data property.
You either need to mark all custom action data properties as hidden, which makes debugging very difficult. With this solution you would need to print each custom action data value to the log file by hand and hide the password when you process the value. If you do not want to do that, you could encrypt the password and pass the encrypted password to the deferred custom actions. With this method you need to decrypt the value when needed. This is a very nasty situation and no solution is very nice, Mat Skildum -----Original Message----- From: Chad Petersen [mailto:chad.peter...@harlandfs.com] Sent: Thursday, May 02, 2013 4:54 PM To: General discussion for Windows Installer XML toolset. Subject: Re: [WiX-users] Hide/blank out Passwords in MSI log file If possible paste in a snippet of your log file around where the password is seen. I tried for a long time to hide passwords using the same method. But it was some built-in custom actions that were logging my passwords rather than code I'd written myself. <Property Id="ConfigureIIsExec" Hidden="yes"/> <Property Id="ExecuteSqlStrings" Hidden="yes"/> These were two entries that I made to make those extensions hide the data passed to them, such as my password. -----Original Message----- From: Jeremiahf [mailto:jeremi...@gmail.com] Sent: Thursday, May 02, 2013 2:38 PM To: General discussion for Windows Installer XML toolset. Subject: Re: [WiX-users] Hide/blank out Passwords in MSI log file I have tried that and no luck. My MSI is installed via command line. I've even tried to give the property Id a value in case I missed something and still doesn't work. <Property Id="PASSWORD" Value="password" Hidden="yes" Secure="yes" /> My test system is running Server 2003 R2 SP 2 windows installer version 4.5 6001.22159 I've upgraded from WIX 3.6 TO 3.7 in case it was a bug as I have found in hundreds of blogs online but every time I see that a fix was submitted, I can't tell what version it was submitted in. (sorry for the run on sentence.) J On Thu, May 2, 2013 at 4:24 PM, Steven Ogilvie <steven.ogil...@titus.com>wrote: > I declare the property: > <Property Id="WEBAPPPOOL_PASSWORD" Hidden="yes" Secure="yes"/> This is > how I use my password controls: > <Control Id="textBoxPassword" Type="Edit" Height="15" Width="177" X="180" > Y="152" Property="WEBAPPPOOL_PASSWORD" Password="yes" TabSkip="no" /> > > Logfile: > MSI (c) (70:1C) [14:50:59:778]: PROPERTY CHANGE: Adding > WEBAPPPOOL_PASSWORD property. Its value is '**********' > > > -----Original Message----- > From: Jeremiahf [mailto:jeremi...@gmail.com] > Sent: May-02-13 5:08 PM > To: wix-users@lists.sourceforge.net > Subject: [WiX-users] Hide/blank out Passwords in MSI log file > > Has anyone had luck with this? > > > > I have tried using Hidden, HideTarget and I still see the password in > my logs. Is this still a bug in windows installer? > > > > Thanks in advance, > > ---------------------------------------------------------------------- > -------- Get 100% visibility into Java/.NET code with AppDynamics Lite > It's a free troubleshooting tool designed for production Get down to > code-level detail for bottlenecks, with <2% overhead. > Download for free and get started troubleshooting in minutes. > http://p.sf.net/sfu/appdyn_d2d_ap2 > _______________________________________________ > WiX-users mailing list > WiX-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/wix-users > > > ---------------------------------------------------------------------- > -------- Get 100% visibility into Java/.NET code with AppDynamics Lite > It's a free troubleshooting tool designed for production Get down to > code-level detail for bottlenecks, with <2% overhead. > Download for free and get started troubleshooting in minutes. > http://p.sf.net/sfu/appdyn_d2d_ap2 > _______________________________________________ > WiX-users mailing list > WiX-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/wix-users > -- "They may forget what you said but they will never forget how you made them feel." -- Anonymous ------------------------------------------------------------------------------ Get 100% visibility into Java/.NET code with AppDynamics Lite It's a free troubleshooting tool designed for production Get down to code-level detail for bottlenecks, with <2% overhead. Download for free and get started troubleshooting in minutes. http://p.sf.net/sfu/appdyn_d2d_ap2 _______________________________________________ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users ------------------------------------------------------------------------------ Get 100% visibility into Java/.NET code with AppDynamics Lite It's a free troubleshooting tool designed for production Get down to code-level detail for bottlenecks, with <2% overhead. Download for free and get started troubleshooting in minutes. http://p.sf.net/sfu/appdyn_d2d_ap2 _______________________________________________ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users ------------------------------------------------------------------------------ Get 100% visibility into Java/.NET code with AppDynamics Lite It's a free troubleshooting tool designed for production Get down to code-level detail for bottlenecks, with <2% overhead. Download for free and get started troubleshooting in minutes. http://p.sf.net/sfu/appdyn_d2d_ap2 _______________________________________________ WiX-users mailing list WiX-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/wix-users
