search

MickMake / GoSungrow

GoLang implementation to access the iSolarCloud API updated by SunGrow inverters.
https://mickmake.com/
GNU General Public License v2.0
148 stars 42 forks source link

Please remove clear text passwords from the logs... #76

Open markuhlemann opened 10 months ago

markuhlemann commented 10 months ago

Thanks Mick for writing this add-on, I have de-installed it however when I noticed that both the iSolarCloud password as well as the password of the MQTT user are written in clear text into the log files of the Add-On. That's a critical security vulnerability...

Please mask these entries in the log files. Thanks

MickMake commented 10 months ago

Thanks for that. I'll add it into the next update.