yyqdbngt opened a new pull request, #3370:
URL: https://github.com/apache/rocketmq-dashboard/pull/3370

   ## Summary
   
   Extends the existing `SensitiveRequestToStringTest` (1 to 2 tests) to cover 
the studio user DTOs, which the request-redaction sweep did not include yet.
   
   Added case:
   - `CreateStudioUserDTO` keeps `username` visible but never emits the plain 
password or even the field name, and `ResetPasswordDTO` never emits its new 
password or field name through `toString`.
   
   ## Why
   
   Both DTOs carry plaintext passwords at the API boundary; the sweep already 
covered credential, LLM, and data-source DTOs but not these.
   
   ## Testing
   
   `mvn -B test -Dtest=SensitiveRequestToStringTest` — 2/2 pass; checkstyle 
(validate) clean.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to