btlqql opened a new issue, #2489:
URL: https://github.com/apache/rocketmq-dashboard/issues/2489

   ## Problem
   
   `groupName` is concatenated directly into the double-quoted 
Content-Disposition header. Names containing double quotes, backslashes, 
non-ASCII or control characters can make the header invalid or the export fail.
   
   Location: 
`server/src/main/java/org/apache/rocketmq/studio/instance/dlq/DLQController.java`.
   
   ## Expected behavior
   
   Use Spring `ContentDisposition.attachment().filename(..., UTF_8)`; sanitize 
dangerous characters for the ASCII fallback.
   
   ## Verification
   
   Cover CJK names, spaces, quotes, backslashes and control characters.
   
   Note: different from the alert asset download header issue #2192.
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to