zjncs opened a new pull request, #6605:
URL: https://github.com/apache/rocketmq-dashboard/pull/6605

   ### What
   
   CloudCredentialVO is one cloud-vendor credential as the credentials page 
shows it - name, vendor, access key and remark. It had no test, and unlike the 
credential DTOs it is not covered by SensitiveRequestToStringTest, so its 
secret redaction has no net today. This pins: the full identity, and that 
toString keeps the access key (it is the identifier support asks for) while the 
secret key never reaches it - the VO travels through service and request logs.
   
   ### Verification
   
   - New tests on unmodified code: **2/2 green**, checkstyle clean.
   - Discriminating mutation: @ToString.Exclude removed from secretKey (red - 
the leak is caught).
   - Restored: green. Test-only change; no product code touched.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to