The Orion browser bricked several of my Tasmota ESP8266EX devices. They kept upgrading (flashing new firmware) over and over. The first time I started the upgrade myself using the Tasmota web interface which uses this simple HTML form:
<legend><b> Upgrade by web server </b></legend><form method='get' action='u1'><br><b>OTA Url</b><br><input id='o' placeholder="OTA_URL" value="http://ota.tasmota.com/tasmota/tasmota-4M.bin.gz"><br><br><button type='submit'>Start upgrade</button></form>
The upgrade is started simply by a GET of /u1 to the Tasmota device IP address. After the device reboots the upgraded starts again and again and again.
Using tcpdump I found that it is IconService that requests the /u1 URL over and over. Eventually all this flashing is too much for the poor ESP8266EX and it is bricked.
After finding out the Orion browser was to blame, I closed the browser tab with the Tasmota web interface and the requests to /u1 stopped. This managed to save the 4th Tasmota device I worked on today. The first 3 were not so lucky. :-(
GET /u1 HTTP/1.1
Host: 192.168.13.187
Accept: */*
Accept-Language: en-GB,en;q=0.9
Connection: keep-alive
Accept-Encoding: gzip, deflate
User-Agent: IconService/1 CFNetwork/1568.200.51 Darwin/24.1.0
HTTP/1.1 200 OK
Content-Type: text/html
Server: Tasmota/14.3.0.2 (ESP8266EX)
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: -1
Accept-Ranges: none
Transfer-Encoding: chunked
Connection: close
When I browse to a URL it should not be visited over and over again by IconService. Especially not when the URL is the action of an HTML form.
0.99.129-beta (WebKit 619.1.11.111.2)
Sequoia (15)
