CAMEL-9309: Make it easier to turn on|off java transport over http
Project: http://git-wip-us.apache.org/repos/asf/camel/repo Commit: http://git-wip-us.apache.org/repos/asf/camel/commit/c349d13a Tree: http://git-wip-us.apache.org/repos/asf/camel/tree/c349d13a Diff: http://git-wip-us.apache.org/repos/asf/camel/diff/c349d13a Branch: refs/heads/camel-2.16.x Commit: c349d13ab98ac61daba8140f41690a4306880340 Parents: 44e6a30 Author: Claus Ibsen <[email protected]> Authored: Thu Nov 12 11:08:43 2015 +0100 Committer: Claus Ibsen <[email protected]> Committed: Thu Nov 12 14:53:16 2015 +0100 ---------------------------------------------------------------------- .../apache/camel/component/netty/http/NettyHttpConfiguration.java | 3 +++ .../camel/component/netty4/http/NettyHttpConfiguration.java | 3 +++ 2 files changed, 6 insertions(+) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/camel/blob/c349d13a/components/camel-netty-http/src/main/java/org/apache/camel/component/netty/http/NettyHttpConfiguration.java ---------------------------------------------------------------------- diff --git a/components/camel-netty-http/src/main/java/org/apache/camel/component/netty/http/NettyHttpConfiguration.java b/components/camel-netty-http/src/main/java/org/apache/camel/component/netty/http/NettyHttpConfiguration.java index 187143a..044c33c 100644 --- a/components/camel-netty-http/src/main/java/org/apache/camel/component/netty/http/NettyHttpConfiguration.java +++ b/components/camel-netty-http/src/main/java/org/apache/camel/component/netty/http/NettyHttpConfiguration.java @@ -132,6 +132,9 @@ public class NettyHttpConfiguration extends NettyConfiguration { * in the response as a application/x-java-serialized-object content type. * On the producer side the exception will be deserialized and thrown as is, instead of the HttpOperationFailedException. * The caused exception is required to be serialized. + * <p/> + * This is by default turned off. If you enable this then be aware that Java will deserialize the incoming + * data from the request to Java and that can be a potential security risk. */ public void setTransferException(boolean transferException) { this.transferException = transferException; http://git-wip-us.apache.org/repos/asf/camel/blob/c349d13a/components/camel-netty4-http/src/main/java/org/apache/camel/component/netty4/http/NettyHttpConfiguration.java ---------------------------------------------------------------------- diff --git a/components/camel-netty4-http/src/main/java/org/apache/camel/component/netty4/http/NettyHttpConfiguration.java b/components/camel-netty4-http/src/main/java/org/apache/camel/component/netty4/http/NettyHttpConfiguration.java index 54b4e75..694ba2d 100644 --- a/components/camel-netty4-http/src/main/java/org/apache/camel/component/netty4/http/NettyHttpConfiguration.java +++ b/components/camel-netty4-http/src/main/java/org/apache/camel/component/netty4/http/NettyHttpConfiguration.java @@ -131,6 +131,9 @@ public class NettyHttpConfiguration extends NettyConfiguration { * in the response as a application/x-java-serialized-object content type. * On the producer side the exception will be deserialized and thrown as is, instead of the HttpOperationFailedException. * The caused exception is required to be serialized. + * <p/> + * This is by default turned off. If you enable this then be aware that Java will deserialize the incoming + * data from the request to Java and that can be a potential security risk. */ public void setTransferException(boolean transferException) { this.transferException = transferException;
