zjncs opened a new pull request, #6578: URL: https://github.com/apache/rocketmq-dashboard/pull/6578
### What CreateStudioUserDTO is the create-user request. It had no test, and unlike the other sensitive DTOs it is not covered by SensitiveRequestToStringTest - so its password redaction has no net today. This pins: the username is required and bounded at 128, the password is required and bounded 8..256 on both sides, and the password never reaches toString(). ### Verification - New tests on unmodified code: **4/4 green**, checkstyle clean. - Discriminating mutation: @ToString.Exclude removed from password (red - the leak is caught). - Restored: green. Test-only change; no product code touched. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
