Loyal-Young opened a new issue, #7065:
URL: https://github.com/apache/rocketmq-dashboard/issues/7065

   ## Problem
   
   The paged data-source endpoint passes `search` into a SQL `LIKE` clause and 
`type` into another `LIKE` pattern without escaping `%` and `_`. A literal 
search such as `prod_%` therefore matches unrelated JSON values, and a type 
filter of `%` matches every type. The UI presents these values as ordinary 
filter text.
   
   ## Expected behavior
   
   Treat user-provided `%`, `_`, and backslashes as literal characters while 
retaining the endpoint's substring search and exact type-filter behavior. Keep 
filter values bound as parameters.
   
   ## Reproduction
   
   Create data sources with names or URLs containing `prod_a` and `prod_%`, 
then request `/api/settings/datasources/page?search=prod_%`. The current query 
uses `%prod_%%` as a pattern and returns both instead of just the literal match.
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to