yyqdbngt opened a new pull request, #3263:
URL: https://github.com/apache/rocketmq-dashboard/pull/3263

   ## Summary
   
   Extends the existing `CsvUtilTest` (2 to 6 tests) to pin down the 
spreadsheet-safe CSV rendering contract used by export endpoints.
   
   Added cases:
   - every formula-injection character (`=`, `+`, `-`, `@`, tab, CR, LF) as a 
leading character gets the defensive quote prefix;
   - safe values (`123`, plain text, an already-quoted string, empty, null) 
stay unprefixed and are rendered as quoted cells;
   - every embedded quote is doubled, not just the first;
   - commas inside cell values survive inside the quoted cell, and `appendRow` 
keeps them intact across columns.
   
   ## Why
   
   The renderer is the guard against spreadsheet formula injection in every CSV 
export; the previous suite only exercised two of the prefix characters and a 
single quote.
   
   ## Testing
   
   `mvn -B test -Dtest=CsvUtilTest` — 6/6 pass; checkstyle (validate) clean.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to