davsclaus opened a new pull request, #25990: URL: https://github.com/apache/camel/pull/25990
## Backport of #25873 Cherry-pick of #25873 onto `camel-4.22.x`. **Original PR:** #25873 - CAMEL-24548 CAMEL-24549: Harden cloud storage download containment **Original author:** @oscerd **Target branch:** `camel-4.22.x` ### Original description This hardens local download path containment in the Azure Blob/DataLake and Google Storage components by resolving existing filesystem path segments before accepting a destination. It preserves valid nested paths while rejecting linked paths that resolve beyond the configured directory. JIRA: - https://issues.apache.org/jira/browse/CAMEL-24548 - https://issues.apache.org/jira/browse/CAMEL-24549 ### Note on this backport This is a straight cherry-pick of the squash-merge commit, except for one adjustment: the original PR added an upgrade-guide entry to `camel-4x-upgrade-guide-4_23.adoc` (main only). Since that file doesn't exist on `camel-4.22.x`, the equivalent entry was instead added to the existing `== Upgrading from 4.22.0 to 4.22.1` section of `camel-4x-upgrade-guide-4_22.adoc` on this branch (same pattern used for the CAMEL-24464 backport in #25982). Verification on this branch: - `AzureFileNameHelperTest`: 8 passed - `GoogleCloudStorageFileNameHelperTest`: 10 passed _Claude Code on behalf of davsclaus_ -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
