oscerd opened a new pull request, #25831:
URL: https://github.com/apache/camel/pull/25831

   Fixes [CAMEL-24453](https://issues.apache.org/jira/browse/CAMEL-24453).
   
   enhanceHeaderFilterStrategyToSkipHttpRequestHeaders() keeps common request 
headers -
   Authorization, Cookie, Proxy-Authorization and the rest of 
COMMON_HTTP_REQUEST_HEADERS -
   from being echoed back on the response. The lookup was 
Set.contains(headerName) against
   a canonically capitalised Set.of(...), while exchange headers keep the 
casing of the
   inbound request: VertxPlatformHttpConsumer populates them from the Vert.x 
MultiMap as
   received.
   
   HTTP/2 requires field names to be lower case, so on an HTTP/2 request the 
names are
   authorization, cookie and so on, none of which matched. The suppression 
therefore never
   fired for HTTP/2 traffic, nor for any client that varied the casing, and
   VertxPlatformHttpSupport.copyMessageHeadersToResponse wrote the headers to 
the response.
   
   Hold the set in a TreeSet ordered by String.CASE_INSENSITIVE_ORDER so the 
comparison no
   longer depends on how the client spelled the name.
   
   Co-Authored-By: Claude Opus 5 (1M context) <[email protected]>
   Signed-off-by: Andrea Cosentino <[email protected]>
   \n## Verification\n\n3 files changed, including 1 test file(s). Module build 
with \`-am\` is green on current main, no generated-file drift. Verified 
against the pre-fix code when the change was written.
   
   _Claude Code on behalf of oscerd_


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to