123123213weqw opened a new pull request, #7326: URL: https://github.com/apache/rocketmq-dashboard/pull/7326
Fixes #7290. An account with an absent, null, empty or whitespace-only `whiteRemoteAddress` is effectively unrestricted — an empty split yields no bounds at all — but the ACL risk diagnostics graded it `'scoped'` (the default branch of `classifyWhitelist`), reporting the account as healthy/100 with no broad-whitelist finding. `accountWhitelistClass` now returns `'open'` for an empty split whitelist, so the account is graded `BROAD_ACCOUNT_WHITELIST` (critical, evidence `<empty>`) exactly like an explicit `*`, while non-empty whitelists keep delegating to the untouched generic classifier — preserving #7092's bounded-native-wildcard grading (that PR remains open and this change merges cleanly with it; the two cover disjoint cases). Two regression tests: the unrestricted account matrix (`undefined`/`null`/`''`/`' '` → both critical findings, status critical, `broadWhitelistCount` 1, evidence `['<empty>']`), and a control keeping an empty *global* whitelist free of broad-whitelist findings. Suite 10/10; lint clean. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
