devWaves / SwitchBot-MQTT-BLE-ESP32

Allows for multiple SwitchBot bots and curtains to be controlled via MQTT sent to ESP32. ESP32 will send BLE commands to switchbots and return MQTT responses to the broker. Also supports Temperature, Motion, Contact sensors
MIT License
549 stars 68 forks source link

OTA page publicly accessible with login enabled #16

Closed 1RandomDev closed 3 years ago

1RandomDev commented 3 years ago

Even if the ota login screen is enabled http://\<ip-address>/serverIndex is publicly accessible and the password is sent in plain text in the code of the login page

devWaves commented 3 years ago

fixed in v4.1