yuluo-yx opened a new issue, #2770:
URL: https://github.com/apache/rocketmq-dashboard/issues/2770

   ## Problem
   
   ACL wildcard entries return true for every non-blank target before parsing 
the target as an IP literal. Values such as not-an-ip can therefore pass 
wildcard matching even though the API contract expects an address.
   
   ## Expected behavior
   
   Validate the target as an IPv4 or IPv6 literal before accepting wildcard 
ranges.
   
   ## Verification
   
   Extend IpRangeMatcher malformed-input tests for IPv4 and IPv6 wildcards.
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to