Uploaded image for project: 'Camel'
  1. Camel
  2. CAMEL-7067

JcrProducer should not store all exchange properties in the target JCR node

    XMLWordPrintableJSON

Details

    • Improvement
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • 2.12.2
    • 2.12.3, 2.13.0
    • camel-jcr
    • None
    • Unknown

    Description

      The CamelJcrInsert operation in JcrProducer stores all exchange properties in the target JCR node including all Camel properties that are found in the incoming exchange. This means that non-relevant data is persisted in JCR nodes including sensitive information such as username and password that is part of the URI in the CamelToEndpoint exchange property. Other examples of such properties include CamelJcrNodeName and CamelExternalRedelivered.

      Attachments

        1. CAMEL-7067.patch
          7 kB
          Gregor Zurowski
        2. CAMEL-7067-headers.patch
          10 kB
          Gregor Zurowski

        Activity

          People

            gzurowski Gregor Zurowski
            gzurowski Gregor Zurowski
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: