network/src/main/java/org/zstack/network/l2/L2NetworkApiInterceptor.java (1)

147-150: 建议在默认回填前对 type 做 trim 归一化

Line 147-150 目前只处理 null。若传入空白字符串（如 " "），不会回填默认类型，可能绕过后续类型分支校验。建议在这里先 trimToNull 再回填。

建议修改

-        // When type is not specified, default to the current network type
-        if (msg.getType() == null) {
-            msg.setType(l2.getType());
-        }
+        // When type is not specified, default to the current network type
+        msg.setType(StringUtils.trimToNull(msg.getType()));
+        if (msg.getType() == null) {
+            msg.setType(l2.getType());
+        }

As per coding guidelines "注意检查来自 Message 的参数是否做过 trim，用户可能在浏览器上复制粘贴的数据带有空格、换行符等"。

🤖 Prompt for AI Agents

Verify each finding against the current code and only fix it if needed.

In `@network/src/main/java/org/zstack/network/l2/L2NetworkApiInterceptor.java`
around lines 147 - 150, The code in L2NetworkApiInterceptor currently only
checks msg.getType() for null before filling the default; update the logic to
normalize/trim the incoming type first (e.g., treat blank or whitespace-only
strings as null) by using a trim-to-null step on msg.getType() and then call
msg.setType(l2.getType()) when the trimmed value is null/empty; locate the
handling around msg.getType()/msg.setType() in L2NetworkApiInterceptor and apply
the trim-to-null normalization prior to the default-backfill so blank strings
don't bypass type validation.

Fix all unresolved CodeRabbit comments on this PR:

• Push a commit to this branch (recommended)
• Create a new PR with the fixes