{"action":"opened","issue":{"url":"https://api.github.com/repos/arendst/Sonoff-Tasmota/issues/4723","repository_url":"https://api.github.com/repos/arendst/Sonoff-Tasmota","labels_url":"https://api.github.com/repos/arendst/Sonoff-Tasmota/issues/4723/labels{/name}","comments_url":"https://api.github.com/repos/arendst/Sonoff-Tasmota/issues/4723/comments","events_url":"https://api.github.com/repos/arendst/Sonoff-Tasmota/issues/4723/events","html_url":"https://github.com/arendst/Sonoff-Tasmota/issues/4723","id":393795803,"node_id":"MDU6SXNzdWUzOTM3OTU4MDM=","number":4723,"title":"Precompiled FW with MQTT Password will expose in HTML in plain text","user":{"login":"wongnam","id":36041520,"node_id":"MDQ6VXNlcjM2MDQxNTIw","avatar_url":"https://avatars1.githubusercontent.com/u/36041520?v=4","gravatar_id":"","url":"https://api.github.com/users/wongnam","html_url":"https://github.com/wongnam","followers_url":"https://api.github.com/users/wongnam/followers","following_url":"https://api.github.com/users/wongnam/following{/other_user}","gists_url":"https://api.github.com/users/wongnam/gists{/gist_id}","starred_url":"https://api.github.com/users/wongnam/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/wongnam/subscriptions","organizations_url":"https://api.github.com/users/wongnam/orgs","repos_url":"https://api.github.com/users/wongnam/repos","events_url":"https://api.github.com/users/wongnam/events{/privacy}","received_events_url":"https://api.github.com/users/wongnam/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-12-24T01:49:46Z","updated_at":"2018-12-24T01:49:46Z","closed_at":null,"author_association":"NONE","body":"If i delete the password hidden mark in MQTT password field it will expose the precompile MQTT password in plain text and even you can read it in HTML source as in my screenshot.\r\n\r\n\r\n\r\n\r\n_Also, make sure these boxes are checked [x] before submitting your issue - Thank you!_\r\n- [x] _Searched the problem in issues and in the wiki_\r\n- [x] _Hardware used_ :  Sonoff SV\r\n- [x] _Development/Compiler/Upload tools used_ : VSC + PlatformIO\r\n- [x] _If a pre-compiled release or development binary was used, which one?_ : Tasmota 6.4.0.3 core 2.4.2\r\n- [x] _You have tried latest release or development binaries?_ :\r\n\r\n**To Reproduce**\r\n* try to delete the password back dot.\r\n* View it in HTML source code\r\n\r\n\r\n**Expected behavior**\r\n* It should be hidden.\r\n\r\n\r\n**Screenshots**\r\n![pw-expose](https://user-images.githubusercontent.com/36041520/50389116-3f2de680-0758-11e9-91ed-bbb6db0fe2fe.JPG)\r\n\r\n![pw-expose-2](https://user-images.githubusercontent.com/36041520/50389147-d7c46680-0758-11e9-9e56-9a3626be5f2a.JPG)\r\n"}}
{"actor":{"display_login":"wongnam"}}