Ensure upgrade action properties are secure.

1 files changed, 4 insertions, 0 deletions

diff --git a/src/WixToolset.Core.WindowsInstaller/Bind/CreateSpecialPropertiesCommand.cs b/src/WixToolset.Core.WindowsInstaller/Bind/CreateSpecialPropertiesCommand.cs
index 8f769904..0d165f80 100644
--- a/src/WixToolset.Core.WindowsInstaller/Bind/CreateSpecialPropertiesCommand.cs
+++ b/src/WixToolset.Core.WindowsInstaller/Bind/CreateSpecialPropertiesCommand.cs
@@ -51,6 +51,10 @@ namespace WixToolset.Core.WindowsInstaller.Bind
                 .Select(ca => ca.Id.Id);
             hiddenProperties.UnionWith(hideTargetCustomActions);
 
+            // Ensure upgrade action properties are secure.
+            var actionProperties = this.Section.Tuples.OfType<UpgradeTuple>().Select(u => u.ActionProperty);
+            secureProperties.UnionWith(actionProperties);
+
             if (0 < adminProperties.Count)
             {
                 var tuple = new PropertyTuple(null, new Identifier(AccessModifier.Private, "AdminProperties"));