[GH-ISSUE #713] Security help wanted #596

New issue

Closed

opened 2026-02-28 01:26:09 +03:00 by kerem · 2 comments

kerem commented

2026-02-28 01:26:09 +03:00

Owner

Originally created by @dmalham on GitHub (Aug 29, 2018).
Original GitHub issue: https://github.com/tzapu/WiFiManager/issues/713

This is a nice bit of code but one thing I don’t like is that after you have saved the WiFi credentials from the AP web page. the browser address of the new page includes both the SSID and the password in plain. This, I think, is a security hole as it stays in the browser history of the device you use to connect to the AP unless, of course, you clear the history or use the private browsing option. Not very idiot proof! Can anyone reassure me or come up with a fix I can use?

Dave

Originally created by @dmalham on GitHub (Aug 29, 2018). Original GitHub issue: https://github.com/tzapu/WiFiManager/issues/713 This is a nice bit of code but one thing I don’t like is that after you have saved the WiFi credentials from the AP web page. the browser address of the new page includes both the SSID and the password in plain. This, I think, is a security hole as it stays in the browser history of the device you use to connect to the AP unless, of course, you clear the history or use the private browsing option. Not very idiot proof! Can anyone reassure me or come up with a fix I can use? Dave