RockteMQ-AI commented on issue #2104: URL: https://github.com/apache/rocketmq-dashboard/issues/2104#issuecomment-5278912746
**Issue Evaluation** Category: `bug` | Status: **Not a Bug** The reported issue has been verified against the current codebase (`master` branch). **Finding:** The described vulnerability pattern does not match the actual code: 1. **Wrong file path** — The issue references `web/src/pages/instance/acl.tsx` which does not exist. The actual ACL file is `frontend-new/src/pages/Acl/acl.jsx`. 2. **Wrong field names** — The issue mentions `r.principal` but the code uses `subject` instead. 3. **No vulnerable code** — There is no `.toLowerCase()` call directly on `subject` or `resource` fields. The only `.toLowerCase()` usage is in the user search filter which safely wraps values with `String(val).toLowerCase()` — this handles null/undefined correctly. 4. **Null guards exist** — Line 231 already guards resource with `resource: singleResource || t.N_A`. The current implementation handles null values appropriately. This issue may describe a different codebase version or has been resolved. --- *Automated evaluation by github-manager-bot* -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
