yyqdbngt opened a new pull request, #2253: URL: https://github.com/apache/rocketmq-dashboard/pull/2253
## Summary - measure credential masking thresholds by Unicode code point instead of UTF-16 code unit - preserve complete supplementary characters at the four-code-point prefix and suffix boundaries - fail closed for malformed UTF-16 so masked API responses never expose isolated surrogates - preserve the existing null, empty, short-value, and ASCII behavior ## Problem `CredentialUtils.mask` sliced credentials at fixed UTF-16 offsets. A supplementary character at a visibility boundary could therefore be split, producing malformed Unicode in an API response. Supplementary characters also counted twice toward the partial-mask threshold. ## Verification - `CredentialUtilsTest`: 7 tests passed - related ACL and credential suites: 75 tests passed - Maven Checkstyle: 0 violations - main/test compilation: 400 main and 140 test sources compiled successfully - `git diff --check` Closes #2252 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
