RockteMQ-AI commented on issue #1118: URL: https://github.com/apache/rocketmq-dashboard/issues/1118#issuecomment-5202068081
**Issue Evaluation** Category: `bug` | Status: **Confirmed** The reported validation gap is valid. The current `MessageController` endpoints do not consistently reject a key-only query when no topic is provided. RocketMQ's key lookup requires a topic, so accepting such a request and silently returning an empty result is misleading — it makes an invalid query indistinguishable from a valid no-result search. **Root Cause:** Missing input validation in the message query path — no explicit check that a non-blank `topic` accompanies a non-blank `key`. **Impact:** Dashboard operators may believe a key search returned no matches when in fact the query was malformed. **Severity:** medium A structured 400 response for key-only queries (while preserving message-ID and topic/time-range queries) is the correct fix. --- *Automated evaluation by github-manager-bot* -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
