RockteMQ-AI commented on issue #2470: URL: https://github.com/apache/rocketmq-dashboard/issues/2470#issuecomment-5361727076
**Issue Evaluation** Category: `bug` | Status: **Confirmed** The reported issue has been verified against the current codebase. **Root Cause:** `DlqMessageController.exportDlqMessage` and `batchExportDlqMessage` build the DLQ topic as `MixAll.DLQ_GROUP_TOPIC_PREFIX + consumerGroup` without trimming `consumerGroup`. `DlqMessageServiceImpl.batchResendDlqMessage` forwards `consumerGroup` and `topicName` unchanged. Optional resend target (`topicName`) is not trimmed and blank values are not treated as absent. **Impact:** DLQ export queries the wrong `%DLQ%` topic when the consumer group has surrounding whitespace. Resend can send an invalid or unintended topic name. Affects `/dlqMessage/exportDlqMessage.do`, `/dlqMessage/batchExportDlqMessage.do`, `/dlqMessage/batchResendDlqMessage.do`. **Severity:** Medium — operations can silently target wrong or invalid topics, mainly exploitable via direct API calls; the UI selects groups from a list so normal UI usage is less affected. An automated fix proposal can be generated. Reply `/approve` to proceed with PR generation. --- *Automated evaluation by * -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
