123123213weqw opened a new issue, #1560:
URL: https://github.com/apache/rocketmq-dashboard/issues/1560

   ## Problem
   Consumer Group CSV export only neutralizes cells beginning directly with a 
formula operator. A leading tab or line break can be accepted as whitespace by 
spreadsheet applications and expose the following formula, bypassing the 
current CSV-injection guard.
   
   ## Proposed fix
   Treat tab, CR, and LF as dangerous leading characters and add an export 
regression test.
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to