123123213weqw opened a new pull request, #7092: URL: https://github.com/apache/rocketmq-dashboard/pull/7092
Fixes #6435. The frontend ACL risk diagnostics graded any `whiteRemoteAddress` containing `*` as an unrestricted source (`BROAD_ACCOUNT_WHITELIST`, critical) — including bounded native wildcard expressions the ACL grammar explicitly accepts, like `10.0.2.*` or `1050:*:*` on an account whose grants are otherwise specific. `classifyWhitelistAddress` now mirrors the server grammar (`PlainAclRemoteAddressValidator`) structurally, so the scanner-visible bound decides the grade: a wildcard variable must be the final segment, a range variable (`1-20`) must sit at the last index or directly before one trailing wildcard, and bounded wildcards are graded by the existing CIDR breadth thresholds (IPv4 /8, IPv6 /16) — with the entire address space and grammar-invalid forms still graded critical via the conservative fallback, exactly as the issue asks. No suppressions; admin/permission findings untouched. Four regression tests covering the issue's repro, the broad-but-not-entire-space case, the IPv6 /16 threshold, and six invalid/rejected forms that keep the fallback. Suite 13/13, full run 1808/1808, eslint and `tsc -b` clean. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
