Loyal-Young opened a new issue, #7069:
URL: https://github.com/apache/rocketmq-dashboard/issues/7069

   ## Problem
   
   The Studio user directory passes the administrator's search term directly to 
a SQL `LIKE` clause. Searching for a username containing `%` or `_` treats 
those characters as wildcards. The directory can show unrelated accounts, and 
the same filtered list feeds user export.
   
   ## Expected behavior
   
   Search usernames as literal text while retaining ordinary substring 
matching. Escape `%`, `_`, and backslashes before passing the term to the bound 
`LIKE` parameter.
   
   ## Reproduction
   
   Create usernames `ops_a` and `ops_%`, then search for `ops_%` in user 
management. The current query pattern `%ops_%%` matches both accounts.
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to