yyqdbngt opened a new pull request, #3096: URL: https://github.com/apache/rocketmq-dashboard/pull/3096
### Summary Extend the CSV cell guard coverage: - `-`, `@`, leading tab and leading newline values are all neutralized with the single-quote prefix; - leading spaces, plain text and the empty string stay untouched/quoted correctly. ### Why The `CsvUtil` export guard already handles `=`, `+` and embedded quotes; these tests lock down the remaining spreadsheet-formula injection characters so future changes cannot silently widen the attack surface. ### Testing - `mvn -f server/pom.xml -Dtest=CsvUtilTest test` passes: 3/3. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
