You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
registerHandlers exposes control endpoints over Wi‑Fi, but there is no authentication or authorization layer configured for these routes. An attacker on the same network (or connected to the device’s AP) can invoke /api/relay operations to control relays without credentials. Require an authentication gate (e.g., HMAC/shared secret token with nonce/timestamp) and enforce it before routing requests to network handlers.
Activity
k3ldar commentedon Dec 1, 2025
hmac/shared secret can be stored in config