Bug + Security Issue: Special Characters Remote SSID Name

Technical Support for Routers
1

Hi @alzhao,
I think i found a bug today.
I was trying to connect to a McDonalds free wifi, the name was like so: “McDonald’s Free Wifi”.
It showed up in the list correctly, with the single quote after the d, but after adding the connection, in the saved stations page it showed up only as “McDonald”.

The wisp connection also failed since it was not able to find that station since it was cropped.
I guess one of the scripts needs to be guarded for special characters in the SSID name?

Update:
Yes and it is also a potential security issue, a small but crafty ssid name could cause things to happen on the router, shown in a later post.

2

Made a local test connection with the same character, same result, it doesn’t work :smiley:

30
301465×971 227 KB

14
14921×773 112 KB

25
25924×720 148 KB

09
09931×778 94.3 KB

3

Just for fun a made a more broken one called:

23

As expected it breaks even the list:

07

It means that all handling of the SSID name’s should take into account special characters that can break the parsing in bash scripts.

This is also a security issue because a well crafted SSID name could potentially crash or do funny things on the router, as you can see in the last screenshot, where is “data” coming from?

4

@alzhao could you take a look at this? i hope i can be fixed in the next update, or in v3

5

Seems this is a problem. Not sure if this is serious bug. But definitely need to fix the UI.

@kyson-lok

6

Thanks @alzhao @kyson-lok

7

OK, we will check this.

8

@kyson-lok Will this be fixed for v3? :slight_smile:

9

Yes, v3 has fixed it.

10

It can be, it should be configured allway UTF8 by programmer. Same by gli admin and advanced admin password.