When changing WiFi password, the password appears in plaintext in the browser address bar

[puterboy]

I just noticed that after pressing save when changing the WiFi password, the SSID and password appear in plaintext in the browser address bar (and presumably go into your browser history too). This seems like a security issue. May also apply to MQTT and Gateway passwords but I didn't check.

I imagine data is being sent with an HTTP GET rather than POST.

[puterboy]

Is that spam????

[1technophile]

Spam or phishing yes

[1technophile]

I imagine data is being sent with an HTTP GET rather than POST.

Agreed PR welcome to fix that

[puterboy]

Fixed with: https://github.com/1technophile/OpenMQTTGateway/pull/2037