[GitHub] [camel] orpiske commented on pull request #10717: CAMEL-19568: disable header validation on camel-netty-http

2023-07-19 Thread via GitHub
orpiske commented on PR #10717: URL: https://github.com/apache/camel/pull/10717#issuecomment-1641985015 The failure is unrelated to this change. Let's merge. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL

[GitHub] [camel] orpiske commented on pull request #10717: CAMEL-19568: disable header validation on camel-netty-http

2023-07-19 Thread via GitHub
orpiske commented on PR #10717: URL: https://github.com/apache/camel/pull/10717#issuecomment-1641653544 > > > This will open us to CVE weakness. From http response splitting to other stuff. Validation should be always enabled > > > > > > Oh, BTW, this applies to the validation of

[GitHub] [camel] orpiske commented on pull request #10717: CAMEL-19568: disable header validation on camel-netty-http

2023-07-18 Thread via GitHub
orpiske commented on PR #10717: URL: https://github.com/apache/camel/pull/10717#issuecomment-1640379907 > This will open us to CVE weakness. From http response splitting to other stuff. Validation should be always enabled Oh, BTW, this applies to the validation of responses only.

[GitHub] [camel] orpiske commented on pull request #10717: CAMEL-19568: disable header validation on camel-netty-http

2023-07-18 Thread via GitHub
orpiske commented on PR #10717: URL: https://github.com/apache/camel/pull/10717#issuecomment-1640377232 > This will open us to CVE weakness. From http response splitting to other stuff. Validation should be always enabled That's a good point 樂 Any suggestions how we could