maxlength is not always set.

[DaveDavenport]

Latest version (7128981)

At https://github.com/prampec/IotWebConf/blob/master/src/IotWebConfParameter.h#L31

this code is there:

const char IOTWEBCONF_HTML_FORM_PARAM[] PROGMEM =
  "<div class='{s}'><label for='{i}'>{b}</label><input type='{t}' id='{i}' "
  "name='{i}' {l} placeholder='{p}' value='{v}' {c}/>"
  "<div class='em'>{e}</div></div>\n";

{l} has no key, so field is not limited.

I think it might be this:

const char IOTWEBCONF_HTML_FORM_PARAM[] PROGMEM =
  "<div class='{s}'><label for='{i}'>{b}</label><input type='{t}' id='{i}' "
  "name='{i}' maxlength={l} placeholder='{p}' value='{v}' {c}/>"
  "<div class='em'>{e}</div></div>\n";

similar to other places.

[rubenvandeven]

I ran into this issue using Wordclock.

The problem indeed seems to be as @DaveDavenport describes. In IotWebConfParameter.cpp The {l} token is only replace by to the number. Hence, the generated html becomes something like:

<input type='password' id='mqtt_password' name='mqtt_password' 15 placeholder='' value='' data-controlledby='mqtt_enabled' data-showon='1'/>

Thus, the provided length is set as attribute (15) instead of as value to maxlength.

When submitting the form the data is merely cut without a warning. In my case leading to a search as to why mosquitto was not authenticating my user.