Skip to content

SSID is not properly sanitized #2609

@qwerty123443

Description

@qwerty123443

What happened?

I named my router "<script>alert(1)</script>" because I thought it'd be funny, and sometimes I run into websites that randomly break :) In this case, navigating to the wifi settings page caused it.
image

To Reproduce Bug

Set your router's SSID to something containing the string "</script>" and navigate to the wifi settings page

Expected Behavior

I expect the page to be properly displayed

Install Method

Binary from WLED.me

What version of WLED?

0.13.1

Which microcontroller/board are you seeing the problem on?

ESP8266

Relevant log/trace output

No response

Anything else?

No response

Code of Conduct

  • I agree to follow this project's Code of Conduct

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugkeepThis issue will never become stale/closed automatically

    Type

    No type

    Projects

    No projects

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions