[Security Solution] Diff view incorrectly highlights changes in multiline strings #202016
Description
Metadata
Metadata
Assignees
Labels
Security Solution Prebuilt Detection Rules areaSecurity Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc.Security Detection Rule Management TeamSecurity Detection Response TeamFixes for quality problems that affect the customer experienceAddressing this issue will have a medium level of impact on the quality/strength of our product.
Type
Fields
Give feedbackNo fields configured for Bug.
PR: #205138
Summary
When upgrading rules, the diff view displays changes in the wrong places when comparing multiline strings.
Example
Here’s an example of the changes in the ESQL field:
The removed parts (in bold) are misplaced. For comparison, here’s how the same diff appears in an external diff tool: