Aias00 opened a new issue, #831:
URL: https://github.com/apache/rocketmq-dashboard/issues/831

   ## Problem
   
   `ProxyAddressService` only trims `newProxyAddr` / `proxyAddr` values before 
storing or removing them. Malformed values such as missing ports, invalid 
ports, URL paths, or protocol-prefixed strings can pass backend validation and 
enter the proxy address list.
   
   ## Evidence
   
   - 
`server/src/main/java/org/apache/rocketmq/studio/cluster/proxy/ProxyAddressService.java`
 normalizes proxy addresses with `proxyAddr.trim()` only.
   - The frontend form has a basic `host:port` pattern, but backend endpoints 
can still be called directly and should enforce the same contract.
   
   ## Expected behavior
   
   The backend should reject malformed proxy addresses with a clear 400 error 
and only accept normalized proxy endpoint values.
   
   ## Scope
   
   Studio Track 1 / ARCH-01 Proxy management compatibility and configuration 
hardening.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to