From a915f36d31f2ae10a137ad78f8b9e34a785df3cc Mon Sep 17 00:00:00 2001
From: AMATH <116212274+amathxbt@users.noreply.github.com>
Date: Thu, 25 Jun 2026 22:02:17 +0100
Subject: [PATCH] fix(setup): add -r flag to read -s PASSWORD to prevent
 backslash mangling

bash read without -r interprets backslashes as escape sequences. A password
containing a backslash (e.g. P@ss\\word1) is silently rewritten before being
passed to htpasswd, so the hash stored in middleware.yaml does not match
the password the operator actually typed.

Add -r so that read treats the input as raw bytes, matching the exact
password the user intends to set.
---
 setup.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/setup.sh b/setup.sh
index 8dce7e0..df5741c 100755
--- a/setup.sh
+++ b/setup.sh
@@ -111,7 +111,7 @@ echo "Enter username:"
 read USERNAME
 
 echo "Enter password:"
-read -s PASSWORD
+read -r -s PASSWORD
 echo
 
 if ! command -v htpasswd &> /dev/null; then