Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

CAQuietExec might log sensitive information #4706

Closed
wixbot opened this issue Mar 17, 2015 · 2 comments
Closed

CAQuietExec might log sensitive information #4706

wixbot opened this issue Mar 17, 2015 · 2 comments

Comments

@wixbot
Copy link

wixbot commented Mar 17, 2015

CAQuietExec always logs the output from the command that's executed even if the output might contain resolved values from hidden properties. There should be a way of preventing that. Options include:

  1. Automatically hiding program output if hidden properties were passed on the command line.
  2. Providing an option to hide output when the process returns a nonzero exit code (assuming failure messages might provide more details that expose hidden property values).
  3. Providing an option to hide output always.
  4. Filtering the output on a line-by-line basis to replace known hidden property values with asterisks. This is mildly complex to set up but would still provide useful output which is vital for debugging.

Originally opened by firegiantco

@wixbot
Copy link
Author

wixbot commented Mar 17, 2015

  1. Consider an extension to simplify authoring.

Needs a WIP.

@wixbot
Copy link
Author

wixbot commented Nov 12, 2015

WixSilentExec lets you suppress logging.

Originally posted by barnson
Resolution set to fixed
Status changed from Open to Resolved

@wixbot wixbot added this to the v3.x milestone Dec 20, 2015
@wixbot wixbot closed this as completed Dec 20, 2015
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant