Compare commits

..

5 Commits

Author SHA1 Message Date
copilot-swe-agent[bot]
38b159de86 Return 401 immediately on incorrect password instead of using global flag
Co-authored-by: DedeHai <6280424+DedeHai@users.noreply.github.com>
2025-12-23 18:50:22 +00:00
copilot-swe-agent[bot]
b7485e2ed1 Address PR feedback: invert flag logic to otaPassCorrect, simplify error message, remove leftover file
Co-authored-by: DedeHai <6280424+DedeHai@users.noreply.github.com>
2025-12-23 07:35:49 +00:00
copilot-swe-agent[bot]
92a43ff29a Code review and security check completed
Co-authored-by: DedeHai <6280424+DedeHai@users.noreply.github.com>
2025-12-23 06:09:54 +00:00
copilot-swe-agent[bot]
e9a366e547 Add OTA password validation feedback for security settings
Co-authored-by: DedeHai <6280424+DedeHai@users.noreply.github.com>
2025-12-23 06:05:38 +00:00
copilot-swe-agent[bot]
ce9a8fbaad Initial plan 2025-12-23 05:59:26 +00:00

View File

@@ -615,6 +615,10 @@ void handleSettingsSet(AsyncWebServerRequest *request, byte subPage)
aOtaEnabled = request->hasArg(F("AO"));
#endif
otaSameSubnet = request->hasArg(F("SU"));
} else if (otaLock) {
// If OTA is locked and password is incorrect, return error immediately
serveMessage(request, 401, F("Error"), F("Password incorrect"), 254);
return;
}
}