This is an automated email from the ASF dual-hosted git repository.
davsclaus pushed a commit to branch camel-spring-boot-4.22.x
in repository https://gitbox.apache.org/repos/asf/camel-spring-boot.git
The following commit(s) were added to refs/heads/camel-spring-boot-4.22.x by
this push:
new 1098ebb75e8 Regen
1098ebb75e8 is described below
commit 1098ebb75e89faa671380f528786fff38781d4ba
Author: Claus Ibsen <[email protected]>
AuthorDate: Sat Sep 12 08:29:19 2026 +0200
Regen
---
.../springboot/catalog/components/jgroups.json | 6 ++++--
.../camel/springboot/catalog/components/smooks.json | 3 ++-
.../catalog/components/tensorflow-serving.json | 4 ++--
.../springboot/catalog/dataformats/smooks.json | 3 ++-
.../src/main/docs/jgroups.json | 6 ++++++
.../springboot/JGroupsComponentConfiguration.java | 21 +++++++++++++++++++++
.../camel-smooks-starter/src/main/docs/smooks.json | 7 +++++++
.../springboot/SmooksDataFormatConfiguration.java | 16 ++++++++++++++++
.../modules/ROOT/pages/starters/jgroups.adoc | 3 ++-
.../modules/ROOT/pages/starters/smooks.adoc | 3 ++-
10 files changed, 64 insertions(+), 8 deletions(-)
diff --git
a/catalog/camel-catalog-provider-springboot/src/main/resources/org/apache/camel/springboot/catalog/components/jgroups.json
b/catalog/camel-catalog-provider-springboot/src/main/resources/org/apache/camel/springboot/catalog/components/jgroups.json
index 104a2ce7d9a..79816d1fa64 100644
---
a/catalog/camel-catalog-provider-springboot/src/main/resources/org/apache/camel/springboot/catalog/components/jgroups.json
+++
b/catalog/camel-catalog-provider-springboot/src/main/resources/org/apache/camel/springboot/catalog/components/jgroups.json
@@ -29,7 +29,8 @@
"bridgeErrorHandler": { "index": 2, "kind": "property", "displayName":
"Bridge Error Handler", "group": "consumer", "label": "consumer", "required":
false, "type": "boolean", "javaType": "boolean", "deprecated": false,
"autowired": false, "secret": false, "defaultValue": false, "description":
"Allows for bridging the consumer to the Camel routing Error Handler, which
mean any exceptions (if possible) occurred while the Camel consumer is trying
to pickup incoming messages, or the like [...]
"enableViewMessages": { "index": 3, "kind": "property", "displayName":
"Enable View Messages", "group": "consumer", "label": "consumer", "required":
false, "type": "boolean", "javaType": "boolean", "deprecated": false,
"autowired": false, "secret": false, "defaultValue": false, "description": "If
set to true, the consumer endpoint will receive org.jgroups.View messages as
well (not only org.jgroups.Message instances). By default only regular messages
are consumed by the endpoint." },
"lazyStartProducer": { "index": 4, "kind": "property", "displayName":
"Lazy Start Producer", "group": "producer", "label": "producer", "required":
false, "type": "boolean", "javaType": "boolean", "deprecated": false,
"autowired": false, "secret": false, "defaultValue": false, "description":
"Whether the producer should be started lazy (on the first message). By
starting lazy you can use this to allow CamelContext and routes to startup in
situations where a producer may otherwise fail [...]
- "autowiredEnabled": { "index": 5, "kind": "property", "displayName":
"Autowired Enabled", "group": "advanced", "label": "advanced", "required":
false, "type": "boolean", "javaType": "boolean", "deprecated": false,
"autowired": false, "secret": false, "defaultValue": true, "description":
"Whether autowiring is enabled. This is used for automatic autowiring options
(the option must be marked as autowired) by looking up in the registry to find
if there is a single instance of matching t [...]
+ "autowiredEnabled": { "index": 5, "kind": "property", "displayName":
"Autowired Enabled", "group": "advanced", "label": "advanced", "required":
false, "type": "boolean", "javaType": "boolean", "deprecated": false,
"autowired": false, "secret": false, "defaultValue": true, "description":
"Whether autowiring is enabled. This is used for automatic autowiring options
(the option must be marked as autowired) by looking up in the registry to find
if there is a single instance of matching t [...]
+ "deserializationFilter": { "index": 6, "kind": "property", "displayName":
"Deserialization Filter", "group": "security", "label": "consumer,security",
"required": false, "type": "string", "javaType": "java.lang.String",
"deprecated": false, "autowired": false, "secret": false, "description": "Sets
an ObjectInputFilter pattern (jdk.serialFilter syntax) applied as a
defense-in-depth check on the class of the message body deserialized by
org.jgroups.Message.getObject(). The pattern is e [...]
},
"headers": {
"CamelJGroupsChannelAddress": { "index": 0, "kind": "header",
"displayName": "", "group": "common", "label": "", "required": false,
"javaType": "org.jgroups.Address", "deprecated": false, "deprecationNote": "",
"autowired": false, "secret": false, "description": "Address
(org.jgroups.Address) of the channel associated with the endpoint.",
"constantName":
"org.apache.camel.component.jgroups.JGroupsConstants#HEADER_JGROUPS_CHANNEL_ADDRESS"
},
@@ -44,6 +45,7 @@
"bridgeErrorHandler": { "index": 3, "kind": "parameter", "displayName":
"Bridge Error Handler", "group": "consumer (advanced)", "label":
"consumer,advanced", "required": false, "type": "boolean", "javaType":
"boolean", "deprecated": false, "autowired": false, "secret": false,
"defaultValue": false, "description": "Allows for bridging the consumer to the
Camel routing Error Handler, which mean any exceptions (if possible) occurred
while the Camel consumer is trying to pickup incoming [...]
"exceptionHandler": { "index": 4, "kind": "parameter", "displayName":
"Exception Handler", "group": "consumer (advanced)", "label":
"consumer,advanced", "required": false, "type": "object", "javaType":
"org.apache.camel.spi.ExceptionHandler", "optionalPrefix": "consumer.",
"deprecated": false, "autowired": false, "secret": false, "description": "To
let the consumer use a custom ExceptionHandler. Notice if the option
bridgeErrorHandler is enabled then this option is not in use. By def [...]
"exchangePattern": { "index": 5, "kind": "parameter", "displayName":
"Exchange Pattern", "group": "consumer (advanced)", "label":
"consumer,advanced", "required": false, "type": "enum", "javaType":
"org.apache.camel.ExchangePattern", "enum": [ "InOnly", "InOut" ],
"deprecated": false, "autowired": false, "secret": false, "description": "Sets
the exchange pattern when the consumer creates an exchange." },
- "lazyStartProducer": { "index": 6, "kind": "parameter", "displayName":
"Lazy Start Producer", "group": "producer (advanced)", "label":
"producer,advanced", "required": false, "type": "boolean", "javaType":
"boolean", "deprecated": false, "autowired": false, "secret": false,
"defaultValue": false, "description": "Whether the producer should be started
lazy (on the first message). By starting lazy you can use this to allow
CamelContext and routes to startup in situations where a produc [...]
+ "lazyStartProducer": { "index": 6, "kind": "parameter", "displayName":
"Lazy Start Producer", "group": "producer (advanced)", "label":
"producer,advanced", "required": false, "type": "boolean", "javaType":
"boolean", "deprecated": false, "autowired": false, "secret": false,
"defaultValue": false, "description": "Whether the producer should be started
lazy (on the first message). By starting lazy you can use this to allow
CamelContext and routes to startup in situations where a produc [...]
+ "deserializationFilter": { "index": 7, "kind": "parameter", "displayName":
"Deserialization Filter", "group": "security", "label": "consumer,security",
"required": false, "type": "string", "javaType": "java.lang.String",
"deprecated": false, "autowired": false, "secret": false, "description": "Sets
an ObjectInputFilter pattern (jdk.serialFilter syntax) applied as a
defense-in-depth check on the class of the message body deserialized by
org.jgroups.Message.getObject(). The pattern is [...]
}
}
diff --git
a/catalog/camel-catalog-provider-springboot/src/main/resources/org/apache/camel/springboot/catalog/components/smooks.json
b/catalog/camel-catalog-provider-springboot/src/main/resources/org/apache/camel/springboot/catalog/components/smooks.json
index 1d5a23f4a54..466bbfa31d7 100644
---
a/catalog/camel-catalog-provider-springboot/src/main/resources/org/apache/camel/springboot/catalog/components/smooks.json
+++
b/catalog/camel-catalog-provider-springboot/src/main/resources/org/apache/camel/springboot/catalog/components/smooks.json
@@ -35,6 +35,7 @@
"smooksConfig": { "index": 0, "kind": "path", "displayName": "Smooks
Config", "group": "producer", "label": "", "required": true, "type": "string",
"javaType": "java.lang.String", "deprecated": false, "deprecationNote": "",
"autowired": false, "secret": false, "supportFileReference": true,
"description": "Path to the Smooks configuration file" },
"reportPath": { "index": 1, "kind": "parameter", "displayName": "Report
Path", "group": "producer", "label": "", "required": false, "type": "string",
"javaType": "java.lang.String", "deprecated": false, "autowired": false,
"secret": false, "description": "File path to place the generated HTML
execution report. The report is a useful tool in the developers arsenal for
diagnosing issues or comprehending a transformation. Do not set in production
since this is a major performance drain" },
"lazyStartProducer": { "index": 2, "kind": "parameter", "displayName":
"Lazy Start Producer", "group": "producer (advanced)", "label":
"producer,advanced", "required": false, "type": "boolean", "javaType":
"boolean", "deprecated": false, "autowired": false, "secret": false,
"defaultValue": false, "description": "Whether the producer should be started
lazy (on the first message). By starting lazy you can use this to allow
CamelContext and routes to startup in situations where a produc [...]
- "allowExecutionContextFromHeader": { "index": 3, "kind": "parameter",
"displayName": "Allow Execution Context From Header", "group": "advanced",
"label": "advanced", "required": false, "type": "boolean", "javaType":
"java.lang.Boolean", "deprecated": false, "autowired": false, "secret": false,
"defaultValue": false, "description": "Allow execution context to be set from
the CamelSmooksExecutionContext header" }
+ "allowExecutionContextFromHeader": { "index": 3, "kind": "parameter",
"displayName": "Allow Execution Context From Header", "group": "advanced",
"label": "advanced", "required": false, "type": "boolean", "javaType":
"java.lang.Boolean", "deprecated": false, "autowired": false, "secret": false,
"defaultValue": false, "description": "Allow execution context to be set from
the CamelSmooksExecutionContext header" },
+ "allowExternalEntities": { "index": 4, "kind": "parameter", "displayName":
"Allow External Entities", "group": "security", "label": "security",
"required": false, "type": "boolean", "javaType": "boolean", "deprecated":
false, "autowired": false, "secret": false, "security": "insecure:dev",
"insecureValue": "true", "defaultValue": false, "description": "Whether to
allow the XML reader used by Smooks to resolve external XML entities (external
general and parameter entities) when parsin [...]
}
}
diff --git
a/catalog/camel-catalog-provider-springboot/src/main/resources/org/apache/camel/springboot/catalog/components/tensorflow-serving.json
b/catalog/camel-catalog-provider-springboot/src/main/resources/org/apache/camel/springboot/catalog/components/tensorflow-serving.json
index 415450c6db5..17bd15cb6e2 100644
---
a/catalog/camel-catalog-provider-springboot/src/main/resources/org/apache/camel/springboot/catalog/components/tensorflow-serving.json
+++
b/catalog/camel-catalog-provider-springboot/src/main/resources/org/apache/camel/springboot/catalog/components/tensorflow-serving.json
@@ -35,8 +35,8 @@
"credentials": { "index": 8, "kind": "property", "displayName":
"Credentials", "group": "security", "label": "security", "required": false,
"type": "object", "javaType": "io.grpc.ChannelCredentials", "deprecated":
false, "autowired": false, "secret": false, "configurationClass":
"org.apache.camel.component.tensorflow.serving.TensorFlowServingConfiguration",
"configurationField": "configuration", "description": "The credentials of the
client." }
},
"headers": {
- "CamelTensorFlowServingTarget": { "index": 0, "kind": "header",
"displayName": "", "group": "producer", "label": "", "required": false,
"javaType": "String", "deprecated": false, "deprecationNote": "", "autowired":
false, "secret": false, "description": "The target of the client. See:
https:\/\/grpc.github.io\/grpc-java\/javadoc\/io\/grpc\/Grpc.html#newChannelBuilder%28java.lang.String,io.grpc.ChannelCredentials%29",
"constantName": "org.apache.camel.component.tensorflow.serving.Tens [...]
- "CamelTensorFlowServingCredentials": { "index": 1, "kind": "header",
"displayName": "", "group": "producer", "label": "", "required": false,
"javaType": "io.grpc.ChannelCredentials", "deprecated": false,
"deprecationNote": "", "autowired": false, "secret": false, "description": "The
credentials of the client.", "constantName":
"org.apache.camel.component.tensorflow.serving.TensorFlowServingConstants#CREDENTIALS"
},
+ "CamelTensorFlowServingTarget": { "index": 0, "kind": "header",
"displayName": "", "group": "producer", "label": "", "required": false,
"javaType": "String", "deprecated": true, "deprecationNote": "Never read by the
component. The gRPC channel is built once when the endpoint is initialised, so
it cannot be redirected per exchange. Use the target endpoint option.",
"autowired": false, "secret": false, "description": "The target of the client.
See: https:\/\/grpc.github.io\/grpc-java\/ [...]
+ "CamelTensorFlowServingCredentials": { "index": 1, "kind": "header",
"displayName": "", "group": "producer", "label": "", "required": false,
"javaType": "io.grpc.ChannelCredentials", "deprecated": true,
"deprecationNote": "Never read by the component. The gRPC channel is built once
when the endpoint is initialised, so it cannot be re-authenticated per
exchange. Use the credentials endpoint option.", "autowired": false, "secret":
false, "description": "The credentials of the client. D [...]
"CamelTensorFlowServingModelName": { "index": 2, "kind": "header",
"displayName": "", "group": "producer", "label": "", "required": false,
"javaType": "String", "deprecated": false, "deprecationNote": "", "autowired":
false, "secret": false, "description": "Required servable name.",
"constantName":
"org.apache.camel.component.tensorflow.serving.TensorFlowServingConstants#MODEL_NAME"
},
"CamelTensorFlowServingModelVersion": { "index": 3, "kind": "header",
"displayName": "", "group": "producer", "label": "", "required": false,
"javaType": "long", "deprecated": false, "deprecationNote": "", "autowired":
false, "secret": false, "description": "Optional choice of which version of the
model to use. Use this specific version number.", "constantName":
"org.apache.camel.component.tensorflow.serving.TensorFlowServingConstants#MODEL_VERSION"
},
"CamelTensorFlowServingModelVersionLabel": { "index": 4, "kind": "header",
"displayName": "", "group": "producer", "label": "", "required": false,
"javaType": "String", "deprecated": false, "deprecationNote": "", "autowired":
false, "secret": false, "description": "Optional choice of which version of the
model to use. Use the version associated with the given label.",
"constantName":
"org.apache.camel.component.tensorflow.serving.TensorFlowServingConstants#MODEL_VERSION_LABEL"
},
diff --git
a/catalog/camel-catalog-provider-springboot/src/main/resources/org/apache/camel/springboot/catalog/dataformats/smooks.json
b/catalog/camel-catalog-provider-springboot/src/main/resources/org/apache/camel/springboot/catalog/dataformats/smooks.json
index 60aa8e5e828..1661104509f 100644
---
a/catalog/camel-catalog-provider-springboot/src/main/resources/org/apache/camel/springboot/catalog/dataformats/smooks.json
+++
b/catalog/camel-catalog-provider-springboot/src/main/resources/org/apache/camel/springboot/catalog/dataformats/smooks.json
@@ -17,6 +17,7 @@
},
"properties": {
"id": { "index": 0, "kind": "attribute", "displayName": "Id", "group":
"common", "required": false, "type": "string", "javaType": "java.lang.String",
"deprecated": false, "autowired": false, "secret": false, "description": "The
id of this node" },
- "smooksConfig": { "index": 1, "kind": "attribute", "displayName": "Smooks
Config", "group": "common", "required": true, "type": "string", "javaType":
"java.lang.String", "deprecated": false, "autowired": false, "secret": false,
"description": "Path to the Smooks configuration file." }
+ "smooksConfig": { "index": 1, "kind": "attribute", "displayName": "Smooks
Config", "group": "common", "required": true, "type": "string", "javaType":
"java.lang.String", "deprecated": false, "autowired": false, "secret": false,
"description": "Path to the Smooks configuration file." },
+ "allowExternalEntities": { "index": 2, "kind": "attribute", "displayName":
"Allow External Entities", "group": "security", "label": "security",
"required": false, "type": "boolean", "javaType": "java.lang.Boolean",
"deprecated": false, "autowired": false, "secret": false, "defaultValue":
false, "description": "Whether to allow the XML reader used by Smooks to
resolve external XML entities (external general and parameter entities) when
parsing XML input. This is disabled by default so [...]
}
}
diff --git
a/components-starter/camel-jgroups-starter/src/main/docs/jgroups.json
b/components-starter/camel-jgroups-starter/src/main/docs/jgroups.json
index 5a0fef0734e..d724709f02f 100644
--- a/components-starter/camel-jgroups-starter/src/main/docs/jgroups.json
+++ b/components-starter/camel-jgroups-starter/src/main/docs/jgroups.json
@@ -44,6 +44,12 @@
"type": "java.lang.Boolean",
"sourceType":
"org.apache.camel.spring.boot.ComponentConfigurationPropertiesCommon$CustomizerProperties"
},
+ {
+ "name": "camel.component.jgroups.deserialization-filter",
+ "type": "java.lang.String",
+ "description": "Sets an ObjectInputFilter pattern (jdk.serialFilter
syntax) applied as a defense-in-depth check on the class of the message body
deserialized by org.jgroups.Message.getObject(). The pattern is evaluated after
JGroups has deserialized the payload, so this option alone does not prevent
gadget-chain execution that happens inside the JGroups receive path; to block
such attacks, also configure the JVM-wide -Djdk.serialFilter and secure the
channel with AUTH and encryptio [...]
+ "sourceType":
"org.apache.camel.component.jgroups.springboot.JGroupsComponentConfiguration"
+ },
{
"name": "camel.component.jgroups.enable-view-messages",
"type": "java.lang.Boolean",
diff --git
a/components-starter/camel-jgroups-starter/src/main/java/org/apache/camel/component/jgroups/springboot/JGroupsComponentConfiguration.java
b/components-starter/camel-jgroups-starter/src/main/java/org/apache/camel/component/jgroups/springboot/JGroupsComponentConfiguration.java
index 8a0f857a444..d066ddf3a2a 100644
---
a/components-starter/camel-jgroups-starter/src/main/java/org/apache/camel/component/jgroups/springboot/JGroupsComponentConfiguration.java
+++
b/components-starter/camel-jgroups-starter/src/main/java/org/apache/camel/component/jgroups/springboot/JGroupsComponentConfiguration.java
@@ -83,6 +83,19 @@ public class JGroupsComponentConfiguration
* etc.
*/
private Boolean autowiredEnabled = true;
+ /**
+ * Sets an ObjectInputFilter pattern (jdk.serialFilter syntax) applied as a
+ * defense-in-depth check on the class of the message body deserialized by
+ * org.jgroups.Message.getObject(). The pattern is evaluated after JGroups
+ * has deserialized the payload, so this option alone does not prevent
+ * gadget-chain execution that happens inside the JGroups receive path; to
+ * block such attacks, also configure the JVM-wide -Djdk.serialFilter and
+ * secure the channel with AUTH and encryption. When this option is not set
+ * and no JVM-wide filter is configured, a conservative default filter
+ * denying java.net. and otherwise allowing java., javax. and
+ * org.apache.camel. is applied. Use to accept any type.
+ */
+ private String deserializationFilter;
public JChannel getChannel() {
return channel;
@@ -131,4 +144,12 @@ public class JGroupsComponentConfiguration
public void setAutowiredEnabled(Boolean autowiredEnabled) {
this.autowiredEnabled = autowiredEnabled;
}
+
+ public String getDeserializationFilter() {
+ return deserializationFilter;
+ }
+
+ public void setDeserializationFilter(String deserializationFilter) {
+ this.deserializationFilter = deserializationFilter;
+ }
}
\ No newline at end of file
diff --git a/components-starter/camel-smooks-starter/src/main/docs/smooks.json
b/components-starter/camel-smooks-starter/src/main/docs/smooks.json
index 68c9a3f7c77..0ab6cc744cf 100644
--- a/components-starter/camel-smooks-starter/src/main/docs/smooks.json
+++ b/components-starter/camel-smooks-starter/src/main/docs/smooks.json
@@ -55,6 +55,13 @@
"description": "To use a custom factory for creating Smooks. The option
is a org.smooks.SmooksFactory type.",
"sourceType":
"org.apache.camel.component.smooks.springboot.SmooksComponentConfiguration"
},
+ {
+ "name": "camel.dataformat.smooks.allow-external-entities",
+ "type": "java.lang.Boolean",
+ "description": "Whether to allow the XML reader used by Smooks to
resolve external XML entities (external general and parameter entities) when
parsing XML input. This is disabled by default so that external entities in the
message body are not resolved; enable it only for trusted legacy configurations
that rely on external entity resolution.",
+ "sourceType":
"org.apache.camel.dataformat.smooks.springboot.SmooksDataFormatConfiguration",
+ "defaultValue": false
+ },
{
"name": "camel.dataformat.smooks.customizer.enabled",
"type": "java.lang.Boolean",
diff --git
a/components-starter/camel-smooks-starter/src/main/java/org/apache/camel/dataformat/smooks/springboot/SmooksDataFormatConfiguration.java
b/components-starter/camel-smooks-starter/src/main/java/org/apache/camel/dataformat/smooks/springboot/SmooksDataFormatConfiguration.java
index de57d722084..9f125eab7f8 100644
---
a/components-starter/camel-smooks-starter/src/main/java/org/apache/camel/dataformat/smooks/springboot/SmooksDataFormatConfiguration.java
+++
b/components-starter/camel-smooks-starter/src/main/java/org/apache/camel/dataformat/smooks/springboot/SmooksDataFormatConfiguration.java
@@ -39,6 +39,14 @@ public class SmooksDataFormatConfiguration
* Path to the Smooks configuration file.
*/
private String smooksConfig;
+ /**
+ * Whether to allow the XML reader used by Smooks to resolve external XML
+ * entities (external general and parameter entities) when parsing XML
+ * input. This is disabled by default so that external entities in the
+ * message body are not resolved; enable it only for trusted legacy
+ * configurations that rely on external entity resolution.
+ */
+ private Boolean allowExternalEntities = false;
public String getSmooksConfig() {
return smooksConfig;
@@ -47,4 +55,12 @@ public class SmooksDataFormatConfiguration
public void setSmooksConfig(String smooksConfig) {
this.smooksConfig = smooksConfig;
}
+
+ public Boolean getAllowExternalEntities() {
+ return allowExternalEntities;
+ }
+
+ public void setAllowExternalEntities(Boolean allowExternalEntities) {
+ this.allowExternalEntities = allowExternalEntities;
+ }
}
\ No newline at end of file
diff --git a/docs/spring-boot/modules/ROOT/pages/starters/jgroups.adoc
b/docs/spring-boot/modules/ROOT/pages/starters/jgroups.adoc
index c2a34cb55b2..6b1ea77f3c3 100644
--- a/docs/spring-boot/modules/ROOT/pages/starters/jgroups.adoc
+++ b/docs/spring-boot/modules/ROOT/pages/starters/jgroups.adoc
@@ -23,7 +23,7 @@ Please refer to the above links for usage and configuration
details.
== Spring Boot Auto-Configuration
-The starter supports 7 options, which are listed below.
+The starter supports 8 options, which are listed below.
[width="100%",cols="2,5,^1,2",options="header"]
|===
@@ -32,6 +32,7 @@ The starter supports 7 options, which are listed below.
| camel.component.jgroups.bridge-error-handler | Allows for bridging the
consumer to the Camel routing Error Handler, which mean any exceptions (if
possible) occurred while the Camel consumer is trying to pickup incoming
messages, or the likes, will now be processed as a message and handled by the
routing Error Handler. Important: This is only possible if the 3rd party
component allows Camel to be alerted if an exception was thrown. Some
components handle this internally only, and theref [...]
| camel.component.jgroups.channel | Channel to use. The option is a
org.jgroups.JChannel type. | | JChannel
| camel.component.jgroups.channel-properties | Specifies configuration
properties of the JChannel used by the endpoint. | | String
+| camel.component.jgroups.deserialization-filter | Sets an ObjectInputFilter
pattern (jdk.serialFilter syntax) applied as a defense-in-depth check on the
class of the message body deserialized by org.jgroups.Message.getObject(). The
pattern is evaluated after JGroups has deserialized the payload, so this option
alone does not prevent gadget-chain execution that happens inside the JGroups
receive path; to block such attacks, also configure the JVM-wide
-Djdk.serialFilter and secure the ch [...]
| camel.component.jgroups.enable-view-messages | If set to true, the consumer
endpoint will receive org.jgroups.View messages as well (not only
org.jgroups.Message instances). By default only regular messages are consumed
by the endpoint. | false | Boolean
| camel.component.jgroups.enabled | Whether to enable auto configuration of
the jgroups component. This is enabled by default. | | Boolean
| camel.component.jgroups.lazy-start-producer | Whether the producer should be
started lazy (on the first message). By starting lazy you can use this to allow
CamelContext and routes to startup in situations where a producer may otherwise
fail during starting and cause the route to fail being started. By deferring
this startup to be lazy then the startup failure can be handled during routing
messages via Camel's routing error handlers. Beware that when the first message
is processed then [...]
diff --git a/docs/spring-boot/modules/ROOT/pages/starters/smooks.adoc
b/docs/spring-boot/modules/ROOT/pages/starters/smooks.adoc
index 4d27c186830..6a6ee040a36 100644
--- a/docs/spring-boot/modules/ROOT/pages/starters/smooks.adoc
+++ b/docs/spring-boot/modules/ROOT/pages/starters/smooks.adoc
@@ -24,7 +24,7 @@ Please refer to the above links for usage and configuration
details.
== Spring Boot Auto-Configuration
-The starter supports 6 options, which are listed below.
+The starter supports 7 options, which are listed below.
[width="100%",cols="2,5,^1,2",options="header"]
|===
@@ -33,6 +33,7 @@ The starter supports 6 options, which are listed below.
| camel.component.smooks.enabled | Whether to enable auto configuration of the
smooks component. This is enabled by default. | | Boolean
| camel.component.smooks.lazy-start-producer | Whether the producer should be
started lazy (on the first message). By starting lazy you can use this to allow
CamelContext and routes to startup in situations where a producer may otherwise
fail during starting and cause the route to fail being started. By deferring
this startup to be lazy then the startup failure can be handled during routing
messages via Camel's routing error handlers. Beware that when the first message
is processed then [...]
| camel.component.smooks.smooks-factory | To use a custom factory for creating
Smooks. The option is a org.smooks.SmooksFactory type. | | SmooksFactory
+| camel.dataformat.smooks.allow-external-entities | Whether to allow the XML
reader used by Smooks to resolve external XML entities (external general and
parameter entities) when parsing XML input. This is disabled by default so that
external entities in the message body are not resolved; enable it only for
trusted legacy configurations that rely on external entity resolution. | false
| Boolean
| camel.dataformat.smooks.enabled | Whether to enable auto configuration of
the smooks data format. This is enabled by default. | | Boolean
| camel.dataformat.smooks.smooks-config | Path to the Smooks configuration
file. | | String
|===
