davsclaus opened a new pull request, #24886: URL: https://github.com/apache/camel/pull/24886
## Summary _Claude Code on behalf of davsclaus_ Backport of the EventHubs header filter strategy fix from PR #24884 to the `camel-4.18.x` maintenance branch (CVE-related). **Problem:** `EventHubsProducerOperations` copies ALL Camel exchange headers (including internal `Camel*` headers) into AMQP application properties via `eventData.getProperties().putAll(headers)`. This leaks Camel-internal headers to the Azure Event Hubs broker. **Fix:** - `EventHubsComponent` now extends `HeaderFilterStrategyComponent` instead of `DefaultComponent`, enabling the default `DefaultHeaderFilterStrategy` which filters out `Camel*` and `org.apache.camel.*` headers - Producer passes the `HeaderFilterStrategy` to `EventHubsProducerOperations`, which applies it before putting headers on `EventData` - Consumer only sets `PARTITION_KEY` header when the value is non-null (prevents null header from conflicting with `PARTITION_ID` on round-trip) ## Test plan - [x] `camel-azure-eventhubs` module builds and compiles - [x] Generated files (configurer, JSON metadata) regenerated - [x] IT test constructor calls updated for new 3-arg signature - [ ] CI green 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.6 <[email protected]> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
