wix/src/dtf, branch v6.0.1A mirror of https://github.com/wixtoolset/wix.git
https://git.lua4.win/wix/atom?h=v6.0.12025-04-04T23:08:37+00:00Update READMEs to include OSMF2025-04-04T23:08:37+00:00Rob Menschingrob@firegiant.com2025-04-04T20:33:48+00:00urn:sha1:90b1d345326fd05e701c82fa874590aeb6d1ee93
Fixes 7862
Fixes 8974
Formalize official WiX build and update tags in nupkgs2025-03-20T00:55:00+00:00Rob Menschingrob@firegiant.com2025-03-19T23:46:08+00:00urn:sha1:45535e659ea8b58101fe9e8adfa6aa273d2bb544Introduce the Open Source Maintenance Fee EULA2025-03-20T00:55:00+00:00Rob Menschingrob@firegiant.com2025-03-19T23:26:36+00:00urn:sha1:4d3f7c8cf16db06932596beb27d8d025be501b95
This adds the EULA to all the binary releases
Closes 8974
Reset current directory so SFXCA directory can be cleaned up2024-07-13T15:37:35+00:00Rob Menschingrob@firegiant.com2024-07-13T07:28:18+00:00urn:sha1:590c667a1ecd97a79056daf44dc75bdc7580cb9a
Fixes 8630
Move DTF back to .NET 2.0 as it is still supported2024-07-12T17:52:19+00:00Rob Menschingrob@firegiant.com2024-07-12T08:57:23+00:00urn:sha1:55bfbccc3514efa552726ff3563fe5846de34ef0
Fixes 8134
Ensure elevated SFXCA uses Windows Installer cache and unelevated uses Temp folder2024-04-05T16:46:43+00:00Rob Menschingrob@firegiant.com2024-04-04T22:24:34+00:00urn:sha1:681cf4a9eb6be7e4092c6e5b690773fbd8469e63
Fixes 8078
Protect elevated working folder from malicious data2024-03-22T18:57:27+00:00Rob Menschingrob@firegiant.com2024-03-21T06:51:53+00:00urn:sha1:fed3d69eb4da7fa2bafdd8f555ce5869c36925f7
When running elevated, Burn uses the Windows Temp folder as its working folder
to prevent normal processes from tampering with the files. Windows Temp does
allow non-elevated processes to write to the folder but they cannot see the
files there. Unfortunately, contrary to our belief, non-elevated processes
can read the files in Windows Temp by watching for directory changes. This
allows a malicious process to lie in wait, watching the Windows Temp folder
until a Burn process is launched elevated, then attack the working folder.
Mitigate that attack by protecting the working folder to only elevated users.
Managed custom actions also fall back to using the Windows Temp folder in
some cases and thus can be exposed in a similar fashion as an elevated Burn
process. Remove that possibility.
Don't follow junctions when recursing directories.2024-03-22T18:55:43+00:00Rob Menschingrob@firegiant.com2024-03-22T18:55:43+00:00urn:sha1:e84b6768772c01e44dd55fb583cf78388ec7e48a
When deleting directories recursively, an elevated custom action
following junctions in a user-writable location could recurse into
any directory, including some that you might not want to be deleted.
Therefore, avoid recursing into directories that are actually
junctions (aka "reparse points").
This applies to:
- The RemoveFoldersEx custom action (which doesn't actually do deletions
but would instruct elevated MSI to delete on your behalf).
- DTF's custom action runner.
Make the minimum supported .NET Framework v4.6.22023-12-19T19:46:11+00:00Rob Menschingrob@firegiant.com2023-12-19T03:44:47+00:00urn:sha1:f02ef4acf9649badaa3ab78d2499ca5014fa2234Pretty up build output2023-12-16T22:32:21+00:00Rob Menschingrob@firegiant.com2023-12-06T19:53:44+00:00urn:sha1:1bdcbeb08dfdcbec0929db19569e0eaa13de9c0e