Skip to content

SSID is not properly sanitized #2609

Description

@qwerty123443

What happened?

I named my router "<script>alert(1)</script>" because I thought it'd be funny, and sometimes I run into websites that randomly break :) In this case, navigating to the wifi settings page caused it.
image

To Reproduce Bug

Set your router's SSID to something containing the string "</script>" and navigate to the wifi settings page

Expected Behavior

I expect the page to be properly displayed

Install Method

Binary from WLED.me

What version of WLED?

0.13.1

Which microcontroller/board are you seeing the problem on?

ESP8266

Relevant log/trace output

No response

Anything else?

No response

Code of Conduct

  • I agree to follow this project's Code of Conduct

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugkeepThis issue will never become stale/closed automatically

    Type

    No type

    Projects

    No projects

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions