A mirror of https://github.com/wixtoolset/wix.git https://git.lua4.win/wix/atom?h=robmen%2Fbuild-cleanup 2024-12-30T14:45:49+00:00 2024-12-30T14:45:49+00:00 Rob Mensching rob@firegiant.com 2024-12-30T02:01:20+00:00 urn:sha1:523c66a62a619e6aa9f30070173ea33edfb5e328 The "bundle id" always had more in common with the PackageCode from the Windows Installer. With the introduction of an actual Id attribute on the Bundle element, there is potential for confusion, so there is finally real motivation to rename "bundle id" to "bundle code". 2024-12-27T01:11:13+00:00 Bob Arnson bob@firegiant.com 2024-06-30T00:27:54+00:00 urn:sha1:d6f784beffca852bd89c7b1a734158b24dd45989 2024-11-11T01:14:39+00:00 Bob Arnson bob@firegiant.com 2024-11-10T19:11:16+00:00 urn:sha1:f440fb317c630e7bc6d4ee4d657a200654e2f876 At least one person makes the same typo almost-but-not-quite everywhere. 2024-11-11T01:14:39+00:00 Bob Arnson bob@firegiant.com 2024-11-10T04:54:49+00:00 urn:sha1:53d84c9b96b027df505ab99f3db0719a82108b2b 2024-04-25T20:31:39+00:00 Rob Mensching rob@firegiant.com 2024-04-07T10:26:12+00:00 urn:sha1:4983aeeb2da6e96bc8aad698752b3b962f58e585 2024-03-22T18:57:27+00:00 Rob Mensching rob@firegiant.com 2024-03-21T06:51:53+00:00 urn:sha1:fed3d69eb4da7fa2bafdd8f555ce5869c36925f7 When running elevated, Burn uses the Windows Temp folder as its working folder to prevent normal processes from tampering with the files. Windows Temp does allow non-elevated processes to write to the folder but they cannot see the files there. Unfortunately, contrary to our belief, non-elevated processes can read the files in Windows Temp by watching for directory changes. This allows a malicious process to lie in wait, watching the Windows Temp folder until a Burn process is launched elevated, then attack the working folder. Mitigate that attack by protecting the working folder to only elevated users. Managed custom actions also fall back to using the Windows Temp folder in some cases and thus can be exposed in a similar fashion as an elevated Burn process. Remove that possibility. 2024-03-21T20:07:14+00:00 Rob Mensching rob@firegiant.com 2024-03-21T07:59:21+00:00 urn:sha1:90cdebbe94c7f60db86965ffb97d9ba51d0bc9fc Take this breaking change opportunity to simplify the header files used by BA devs. 2024-03-14T21:21:36+00:00 Bob Arnson bob@firegiant.com 2024-03-14T17:48:20+00:00 urn:sha1:f104c01bc29378b544c0f458c45106bcfd63c11b 2024-03-07T18:55:57+00:00 Rob Mensching rob@firegiant.com 2024-03-07T17:41:29+00:00 urn:sha1:5baa1dfe8ba2a3bd4728bca118fe1de225f848d4 Also renames WixToolet.BextUtil nupkg to WixToolset.BootstrapperExtensionApi. 2024-03-07T18:55:57+00:00 Rob Mensching rob@firegiant.com 2024-03-06T22:48:10+00:00 urn:sha1:3d2d46f62fc01e2653d0251ad9703090574e7c41