yx9o opened a new issue, #580:
URL: https://github.com/apache/rocketmq-dashboard/issues/580

   ## Problem
   
   `POST /api/settings/datasources/update` saves requests without checking 
whether the required `key` belongs to an existing data source.
   
   An unknown `key` is inserted as a new data source and the update returns 
success.
   
   ## Expected behavior
   
   - Reject unknown data source keys with HTTP 404.
   - Prevent update requests from creating new data sources.
   - Preserve normal updates for existing data sources.
   - Keep data source creation exclusive to the create endpoint.
   
   ## Proposed fix
   
   Atomically replace only existing entries and add service and repository 
regression tests.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to