Aias00 opened a new issue, #838: URL: https://github.com/apache/rocketmq-dashboard/issues/838
### What happened? RmqSettings uses Lombok Data, so its generated toString includes the json field. That field stores the persisted settings snapshot and may contain sensitive values such as LLM API keys before JSON write-only filtering is applied at the REST boundary. If an entity instance is logged or included in diagnostics, the raw settings JSON can be exposed. ### Expected behavior RmqSettings.toString should not include the json field. It can still expose safe metadata such as id and updatedAt. ### Why this matters This is part of the Studio AI Native and settings management surface. AI provider credentials should not leak through incidental logging. ### Candidate fix Add Lombok ToString.Exclude to RmqSettings.json and cover the toString behavior with a small unit test. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
