update wix installer template to remove custom directory chooser
What changed, and why it matters
This commit removes the Windows installer's custom directory chooser. The installer will now always install Sparrow into a standard per-user location instead of letting the user pick a different folder. This is a routine packaging change that reduces user choice but does not, by itself, create a security vulnerability.
No security action required. Treat as a normal build/UX change. If the removal was intended to address a specific installer bug, verify through release notes or issue tracker.
Security signals we found
No security-relevant code change
Installer UX change only
No privilege model change
No cryptographic or network changes
Evidence from the diff
The Gradle build script drops the --win-dir-chooser option from the WiX/MSI installer configuration for Windows. The installer remains a per-user install (--win-per-user-install) and keeps menu/shortcut options. Removing the directory chooser means the MSI will not prompt for an install path and will use the default per-user location. There is no code change in the application, no privilege escalation, and no patch of a vulnerability in the diff.
Changed components
Windows MSI installer build configuration (build.gradle)Inspect captured patch +1 / −1
diff --git a/build.gradle b/build.gradle
index e4bf1e8..8e78057 100644
--- a/build.gradle
+++ b/build.gradle
@@ -266,7 +266,7 @@ jlink {
imageOptions = []
installerOptions = ['--file-associations', 'src/main/deploy/psbt.properties', '--file-associations', 'src/main/deploy/txn.properties', '--file-associations', 'src/main/deploy/asc.properties', '--license-file', 'LICENSE']
if(os.windows) {
- installerOptions.addAll(['--win-per-user-install', '--win-dir-chooser', '--win-menu', '--win-menu-group', 'Sparrow', '--win-shortcut', '--resource-dir', 'src/main/deploy/package/windows/'])
+ installerOptions.addAll(['--win-per-user-install', '--win-menu', '--win-menu-group', 'Sparrow', '--win-shortcut', '--resource-dir', 'src/main/deploy/package/windows/'])
imageOptions.addAll(['--icon', 'src/main/deploy/package/windows/sparrow.ico'])
installerType = "msi"
}
Why this scored 19/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.