btlqql opened a new issue, #2877:
URL: https://github.com/apache/rocketmq-dashboard/issues/2877

   The consumer offset reset preview normalizes the group and topic names 
before calling the provider, but the apply path only normalizes the group name. 
A request whose topic contains leading or trailing whitespace can therefore 
preview successfully and then send a different, untrimmed topic to the provider 
when the reset is applied. The audit entry also records the unnormalized value.
   
   The apply path should validate and normalize the topic with the same 
boundary helper used by preview, then use that value for both the provider call 
and audit detail.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to