ESP32-C3 ad blocker adds authentication for device changes

The ESP32-C3 Adblock project now requires authentication for dashboard operations that change its blocklist, network settings or firmware, its repository documentation says. Previously, anyone able to reach the device on the local network could rewrite the blocklist or install arbitrary firmware without credentials. The project also requires a custom request header on mutating endpoints to prevent unrelated webpages from triggering actions through cached browser credentials. It escapes custom domain names before displaying them to close a stored script-injection path. Dashboard traffic still uses plain HTTP, allowing an attacker who can intercept local network traffic to read authentication credentials.