123123213weqw opened a new issue, #1558: URL: https://github.com/apache/rocketmq-dashboard/issues/1558
## Problem Topic CSV export only neutralizes cells whose first character is `=`, `+`, `-`, or `@`. Spreadsheet applications may also interpret formulas after a leading tab or line break, so a topic field beginning with control whitespace can bypass the current CSV-injection guard. ## Proposed fix Treat leading tab, CR, and LF as formula-risk prefixes and add an export regression test for a tab-prefixed formula value. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
