pilichoumao opened a new pull request, #6443: URL: https://github.com/apache/rocketmq-dashboard/pull/6443
A stored plain-access account with `whiteRemoteAddress: "10.0.2.*"`, DENY defaults and specific grants currently gets a critical unrestricted-source finding because diagnostics treat every `*` as open access. Recognized bounded native IPv4/IPv6 ranges now use the existing breadth thresholds; `10.*.*.*` remains a broad-source warning, while entire-space and unrecognized wildcards remain critical. Fixes #6435 The change counts address combinations without enumerating addresses, recognizes fixed-prefix native range/wildcard forms conservatively, and preserves CIDR compatibility, administrator and permission findings. It changes frontend diagnostics only; address validation, authentication, enforcement, APIs, thresholds and UI strings are unchanged. The ACL summary is a dashboard-store account view, not a live Broker configuration scan. Validation on rocketmq-studio 779b8c0e7aed2396d3cc72743dcd544ea48e9ae6: - Same final regression files before/after: baseline 14 failed / 56 passed, fixed 70/70, including the existing AclPage and utility suites. Covers narrow/wide native IPv4 expressions, full-space wildcards, IPv6 ranges and compression, malformed wildcard fallback, CIDR boundaries, global/account aggregation and independent permission findings. Page tests use the store-summary API shape with a mock. - Combined with the actual four-file behavior patch of open translation PR #5568 at b908617df8d0cd92ca0bb85c75e49cfe8bb0f005: 70/70. Its unrelated archiveFailed formatting hunk already exists in this baseline and was explicitly skipped. No translation code is included here. - TypeScript/Vite production build and dependency license check passed; ESLint: 0 errors and 10 existing warnings; license tests: 5/5; modified-file formatting and diff checks passed. - Full frontend suite: 1,639 passed / 2 failed across 159 files. Both failures are unchanged baseline issues: Producer.test.tsx "discards a slow connection response after the topic changes" (pointer-events: none) and UserManagement.test.tsx "exports all users that match the active filters" (export query omits search: ops). Same-SHA, same-dependency, single-worker baseline/previous patched comparison logs exist separately: each has 29 passed / these same 2 failed; this is prior comparison evidence, not a newly rerun baseline on this branch. No unrelated fix is included. Tests ran sequentially with one fork worker, no file parallelism, a 768 MiB Node heap limit, and bounded build/lint heaps. Dependencies were reused without lockfile changes. No live Broker/Proxy authentication or JVM integration tests were run locally. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
