ramu11 commented on PR #25551: URL: https://github.com/apache/camel/pull/25551#issuecomment-5368054980
Thanks for the detailed security review. I've addressed all three documentation suggestions: - Added an explicit warning about the potential impact of context.stop() and other public Camel API calls when trusted mode is enabled. - Added a warning against deriving resource:file: / resource:classpath: paths from untrusted input. - Documented the python.PosixModuleBackend=java configuration and clarified that allowIO(false) is not a hard security sandbox and that HostAccess remains the security boundary. These are documentation-only changes; no implementation or test behavior was changed. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
