oscerd opened a new pull request, #23992:
URL: https://github.com/apache/camel/pull/23992

   Backport to `camel-4.18.x` of CAMEL-23588 (main commit `d5a717dd0f8`).
   
   ## What
   
   `UndertowHeaderFilterStrategy` now also filters the legacy `websocket.*` 
Exchange-header prefix (in addition to the `Camel*` / `camel*` / 
`org.apache.camel.*` prefixes it already filtered), in both the inbound (wire 
-> exchange) and outbound (exchange -> wire) directions. This follows the 
dedicated-filter-strategy shape used by CAMEL-23532 for `camel-vertx-websocket` 
/ `camel-atmosphere-websocket` / `camel-iggy`, which were already backported to 
this branch.
   
   The `UndertowConstants` string values are unchanged (they are part of the 
component's externally-visible API contract), so routes referencing them within 
an undertow route continue to work unchanged. As documented, the 
`HeaderFilterStrategy` governs only the transport boundary and is 
defence-in-depth; route authors handling untrusted inbound traffic should still 
strip `websocket.*` headers explicitly.
   
   ## Changes
   
   - `UndertowHeaderFilterStrategy`: add `websocket.` to the in/out filter 
prefixes (identical to main).
   - `camel-4x-upgrade-guide-4_18.adoc`: add the `camel-undertow` "potential 
breaking change" entry, grouped with the existing websocket family.
   
   The matching entry will be synced to the `4_18` upgrade guide on `main` in a 
separate doc-sync PR, per the upgrade-guide policy.
   
   ---
   _Claude Code on behalf of Andrea Cosentino_


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to