Skip to content

CAMEL-24085: Apply header filter strategy to IronMQ message envelope headers (4.14.x backport)#24907

Merged
davsclaus merged 1 commit into
apache:camel-4.14.xfrom
oscerd:backport-4.14.x-CAMEL-24085
Jul 19, 2026
Merged

CAMEL-24085: Apply header filter strategy to IronMQ message envelope headers (4.14.x backport)#24907
davsclaus merged 1 commit into
apache:camel-4.14.xfrom
oscerd:backport-4.14.x-CAMEL-24085

Conversation

@oscerd

@oscerd oscerd commented Jul 19, 2026

Copy link
Copy Markdown
Contributor

Backport of #24828 (merged on main, CAMEL-24085) to camel-4.14.x. Same branch adaptations as the 4.18.x backport #24905 (explicit setInFilterStartsWith(CAMEL_FILTER_STARTS_WITH) since this branch predates CAMEL-23543, junit5 test support). IronMQConsumerHeaderFilterTest passes on this branch. Module tests + full reactor build from the branch root: success, no stale generated files. The 4.14.9 upgrade-guide entry is added on main via the doc-sync PR.

Claude Code on behalf of Andrea Cosentino (@oscerd).

🤖 Generated with Claude Code

…headers (4.14.x backport)

The IronMQ consumer deserializes a JSON envelope (a headers map and a body)
and copied the embedded header entries onto the Camel message without
applying a HeaderFilterStrategy. Route the envelope headers through a
HeaderFilterStrategy so Camel* headers (matched case-insensitively) present
in the sender-controlled envelope are filtered, consistent with the inbound
header filtering performed by other consumers.

Backport to camel-4.14.x: the strategy sets
setInFilterStartsWith(CAMEL_FILTER_STARTS_WITH) explicitly, since
DefaultHeaderFilterStrategy on this branch does not filter Camel* inbound by
default. Test support uses junit5 on this branch.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Signed-off-by: Andrea Cosentino <ancosen@gmail.com>

@gnodet gnodet left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM — clean backport of #24828 to camel-4.14.x.

The code is identical to the already-approved 4.18.x backport (#24905): same HEADER_FILTER_STRATEGY with explicit setInFilterStartsWith(CAMEL_FILTER_STARTS_WITH) (necessary since this branch predates CAMEL-23543), same applyFilterToExternalHeaders() guard in copyFrom(), same IronMQConsumerHeaderFilterTest covering the CVE-2025-27636 family vector.

No concerns. Consistent with the header-filtering pattern applied across consumers.

Claude Code on behalf of gnodet — AI-generated review

@davsclaus davsclaus added this to the 4.14.9 milestone Jul 19, 2026
@davsclaus
davsclaus merged commit 2d301c5 into apache:camel-4.14.x Jul 19, 2026
3 checks passed
@oscerd
oscerd deleted the backport-4.14.x-CAMEL-24085 branch July 20, 2026 12:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

enhancement New feature or request

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants