[PATCH] DPP: Accept plain-text SSID in configurator parameter parsing

[Jouni Malinen]

On Thu, May 21, 2026 at 11:58:42AM +0800, HungTsung Huang wrote:
> I agree the current approach is too broad and risks breaking existing users.
> I plan to revise as follows:
> - Introduce a new parameter, ssid_str=, for plain-text SSID.
> - Parse ssid_str= in a separate branch from ssid=.
> - Reject ambiguous input when both ssid= and ssid_str= are present in the same command.

Please keep in mind that SSID is an arbitrary octet string that is
allowed to contain values like nul (0x00) and newline and obvious things
like " ssid=112233". In other words, this type of addition of
ssid_str=<text> is not exactly robust and can cause lots of issues in
various corner cases. This is exactly why the current design uses a
hexdump of arbitrary binary data..

-- 
Jouni Malinen                                            PGP id EFC895FA