Wi-Fi password disclosure vulnerability

[positivehacking]

Due to a weak signal or a router reboot the clock switches to hotspot mode. This hotspot requires no password to connect and displays a setup page that reveals my network password in plain text to /config.json request.

[GeekMagicClock]

Yes, that's a possible way, what about responsed with a "*******" in the password area if request /config.json ?

[positivehacking]

Do you mean to put asterisks in the response body like this?
{"a":"mynetworkname", "p":"**************"}
I think it will be OK if the number of asterisks will not match the actual length of the password. Even if the real used network's name will be visible.