From 45c500ff5255abfced709fb25dcfad9fb00beb3e Mon Sep 17 00:00:00 2001
From: AnanthaC <anantha_chelladurai@comcast.com>
Date: Wed, 1 Oct 2025 04:34:49 +0000
Subject: [PATCH 1/2] RDKB-61864: Harden WebUI Login

Signed-off-by: AnanthaC <anantha_chelladurai@comcast.com>
---
 source/Styles/xb3/jst/check.jst | 2 +-
 source/Styles/xb3/jst/index.jst | 6 ++++++
 2 files changed, 7 insertions(+), 1 deletion(-)

diff --git a/source/Styles/xb3/jst/check.jst b/source/Styles/xb3/jst/check.jst
index c6ab31a..1bb0ba7 100644
--- a/source/Styles/xb3/jst/check.jst
+++ b/source/Styles/xb3/jst/check.jst
@@ -360,7 +360,7 @@ else
                 }
                 if($flag==0){
 //                    session_destroy();
-                    sendError( '<script type="text/javascript"> alert($.i18n("Username or password is incorrect!"));history.back(); </script>');
+                    sendError( '<script type="text/javascript"> alert($.i18n("Authentication failed. The default password is printed on the bottom or back of your router - use this if you haven’t already changed it."));history.back(); </script>');
                 }
             }
             else
diff --git a/source/Styles/xb3/jst/index.jst b/source/Styles/xb3/jst/index.jst
index 0205879..1a74bea 100644
--- a/source/Styles/xb3/jst/index.jst
+++ b/source/Styles/xb3/jst/index.jst
@@ -389,6 +389,12 @@ if($webuiIsEnabled == "false"){
         <div class="form-btn"  id="login_btn">
                 <input type="submit" class="btn" value="Login" />
         </div>
+        <div class="form-row">
+                <?% if(!$isMSO) { ?>
+                        <p id="index_helptext">Tip: The default password is printed on the bottom or back of your router - use this if you haven’t already changed .</
+                <?% } ?>
+        </div>
+
 <input type="hidden" name="locale" id="locale" value="<?% echo($locale); ?>">
 </form>
 </div>

From 34bbe12cdf60a61a51fe518ea8884cd23be9ab15 Mon Sep 17 00:00:00 2001
From: Ananth916 <74174916+Ananth916@users.noreply.github.com>
Date: Wed, 1 Oct 2025 11:23:39 +0530
Subject: [PATCH 2/2] Update index.jst

---
 source/Styles/xb6/jst/index.jst | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/source/Styles/xb6/jst/index.jst b/source/Styles/xb6/jst/index.jst
index 2238dd4..14ae36f 100644
--- a/source/Styles/xb6/jst/index.jst
+++ b/source/Styles/xb6/jst/index.jst
@@ -346,6 +346,11 @@ if($webuiIsEnabled == "false"){
 	<div class="form-btn"  id="login_btn">
 		<input type="submit" class="btn" value="Login" />
 	</div>
+    <div class="form-row">
+                <?% if(!$isMSO) { ?>
+                        <p id="index_helptext">Tip: The default password is printed on the bottom or back of your router - use this if you haven’t already changed .</
+                <?% } ?>
+    </div>
 <input type="hidden" name="locale" id="locale" value="<?% echo($locale); ?>">
 </form>
 </div>