[
https://issues.apache.org/jira/browse/CAMEL-7067?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13856160#comment-13856160
]
Gregor Zurowski commented on CAMEL-7067:
----------------------------------------
As discussed, I have refactored the JCR component so it uses message headers
instead of exchange properties as the data source for properties in target JCR
nodes. Pull request: https://github.com/apache/camel/pull/78
> JcrProducer should not store all exchange properties in the target JCR node
> ---------------------------------------------------------------------------
>
> Key: CAMEL-7067
> URL: https://issues.apache.org/jira/browse/CAMEL-7067
> Project: Camel
> Issue Type: Improvement
> Components: camel-jcr
> Affects Versions: 2.12.2
> Reporter: Gregor Zurowski
> Fix For: 2.12.3, 2.13.0
>
> Attachments: CAMEL-7067-headers.patch, CAMEL-7067.patch
>
>
> The CamelJcrInsert operation in JcrProducer stores all exchange properties in
> the target JCR node including all Camel properties that are found in the
> incoming exchange. This means that non-relevant data is persisted in JCR
> nodes including sensitive information such as username and password that is
> part of the URI in the CamelToEndpoint exchange property. Other examples of
> such properties include CamelJcrNodeName and CamelExternalRedelivered.
--
This message was sent by Atlassian JIRA
(v6.1.5#6160)
