davsclaus opened a new pull request, #26216:
URL: https://github.com/apache/camel/pull/26216

   ## Backport of #26208
   
   Straight cherry-pick of #26208 (commit `e6e5621639a1`) onto `camel-4.22.x`. 
No conflicts, no manual changes.
   
   **Original PR:** #26208 — CAMEL-24655: add regression test for 
case-insensitive Camel header filtering in the CoAP consumer
   **Original author:** @oscerd
   **Target branch:** `camel-4.22.x`
   
   ### Why backport
   
   The test guards the CVE-2025-27636 class of bug: the CoAP consumer maps 
incoming URI query parameters into Exchange headers, and the 
`HeaderFilterStrategy` call is what stops a remote peer from setting `Camel*` 
internal headers. `camel-4.22.x` carries the same 
`CamelCoapResource#handleRequest` code (the `applyFilterToExternalHeaders` call 
is present at the same place), so the branch benefits from the same regression 
guard.
   
   This is a **test-only** change — no production code is modified.
   
   ### Verification
   
   - `mvn test -Dtest=CoAPHeaderInjectionTest` in `components/camel-coap` on 
this branch: **1 test, green**.
   
   _Claude Code on behalf of @davsclaus_


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to