Monitor-Buddy 1.0.1

Monitor-Buddy 1.0.1 is a security fix for the Wi-Fi setup portal. If you've built one, re-flash it with this release.

What's fixed

The Wi-Fi setup page listed nearby networks by inserting their names as HTML. A nearby network with a crafted name could therefore run script inside the setup page while you were configuring your Monitor-Buddy, and that script could change the saved Wi-Fi settings or erase the stored files. The page now shows network names as plain text.

It's the same bug as in the AyresWiFiManager library's built-in page (fixed in AyresWiFiManager 2.3.2). Monitor-Buddy serves its own copy of the page, so it needed its own fix. Nothing else changed.

Updating an existing Monitor-Buddy

1. Download Monitor-Buddy-1.0.1.zip from the Assets below and extract it. Copy your config/config.h over from your old folder, so you keep your settings.
2. Flash it the same way as before: README §4 — Flashing the board. scripts/auto_upload_fs.py uploads the fixed portal page together with the firmware.
3. Set up Wi-Fi again. The portal page changed, so the flash rewrites the device's file system, and that erases the saved Wi-Fi credentials. On first boot, the Monitor-Buddy opens its setup portal. Join the Monitor-Buddy-Setup network and enter your Wi-Fi as you did the first time, this time on the fixed page.

Your settings in config/config.h (location, timezone, GitHub user, API key) are compiled into the firmware and aren't affected.

Download

Monitor-Buddy-1.0.1.zip is the curated build package: only the files needed to build and flash (firmware, captive-portal HTML, PlatformIO config, config template). The auto-generated Source code archives contain the full repository.

Hardware

Unchanged: Waveshare ESP32-C6-Touch-LCD-1.47, one 3D-printed holder (Monitor-Buddy_flat or Monitor-Buddy_recess), a USB-C cable.