[
https://issues.apache.org/jira/browse/CAMEL-7067?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13848291#comment-13848291
]
Claus Ibsen commented on CAMEL-7067:
------------------------------------
We should only store data from the message, eg body, headers. properties on
exchange is private and should not be stored at all.
This is the concept of the Camel components.
Gregor, do you mind working on a patch that only stores body/headers?
> JcrProducer should not store all exchange properties in the target JCR node
> ---------------------------------------------------------------------------
>
> Key: CAMEL-7067
> URL: https://issues.apache.org/jira/browse/CAMEL-7067
> Project: Camel
> Issue Type: Bug
> Components: camel-jcr
> Affects Versions: 2.12.2
> Reporter: Gregor Zurowski
> Fix For: 2.12.3, 2.13.0
>
> Attachments: CAMEL-7067.patch
>
>
> The CamelJcrInsert operation in JcrProducer stores all exchange properties in
> the target JCR node including all Camel properties that are found in the
> incoming exchange. This means that non-relevant data is persisted in JCR
> nodes including sensitive information such as username and password that is
> part of the URI in the CamelToEndpoint exchange property. Other examples of
> such properties include CamelJcrNodeName and CamelExternalRedelivered.
--
This message was sent by Atlassian JIRA
(v6.1.4#6159)
