The GitHub Actions job "CI" on rocketmq-dashboard.git/fix-101501 has succeeded.
Run started by GitHub user lizhimins (triggered by lizhimins).

Head commit for run:
79ccb5a83180850a7d9c0ee69a1ac55d44bef2bc / lizhimins <[email protected]>
fix(rmqctl): reject a query or fragment in --server before it is written

studio.Target.validate() already refuses a server URL carrying user info, a
query or a fragment when the request is made, but `config set-context` only
checked the user info. "--server https://host/?accessKey=..."; therefore landed
in the config file in plain text and was echoed back by `config get-contexts`.

Mirror the request-time rule on the write side so credentials cannot be
persisted through the query or the fragment either, and cover both shapes in
the existing rejection table.

Report URL: 
https://github.com/apache/rocketmq-dashboard/actions/runs/39249762617

With regards,
GitHub Actions via GitBox

Reply via email to