yuluo-yx opened a new issue, #2769:
URL: https://github.com/apache/rocketmq-dashboard/issues/2769

   ## Problem
   
   Browser storage parsing accepts zero, negative, and fractional user IDs, and 
interprets every non-true admin value as false. Corrupted storage can therefore 
create a plausible but invalid local identity.
   
   ## Expected behavior
   
   Accept only positive safe-integer IDs and only the literal true/false 
permission values; otherwise return unknown metadata.
   
   ## Verification
   
   Add an auth storage regression test with malformed ID and admin values.
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to