ESPHome removes the contents of password-mode text fields from its web server’s data responses. The interface displayed a mask, but another field in the same response still carried the real value, exposing the secret to anyone able to read that response.
Home Assistant
- Today
- 135
- 7 days
- 586