coder999o opened a new pull request, #6064:
URL: https://github.com/apache/rocketmq-dashboard/pull/6064

   ## What is the purpose of the change
   
   Apache RocketMQ serializes message properties without escaping separators. 
Embedded separators in tags, keys or user properties can silently split or 
rename stored properties.
   
   Reject inputs that cannot round-trip with HTTP 400 before acquiring admin or 
producer clients.
   
   ## Brief changelog
   
   - Validate tags, keys and user properties using RocketMQ's wire separator 
constants.
   - Preserve reserved-property filtering and encodable values, including 
Unicode, commas and newlines.
   - Add regressions for invalid inputs, failed-operation auditing and property 
codec round-trips.
   
   ## Verifying this change
   
   - `mvn -B -ntp -f server/pom.xml 
-Dtest='RocketMQAdminClientImplTest,MetadataServiceTest,RocketMQMetadataProviderTest,MessageSendToolHandlerTest'
 test` — 207 tests passed; compilation and Checkstyle passed.
   - `git diff --check` — passed.
   - Five invalid-input regression cases failed before the fix and passed 
afterward.
   - Tests used the RocketMQ 5.5.0 codec and mocked clients. The full backend 
suite and live Broker integration were not run.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to