oscerd opened a new pull request, #26737: URL: https://github.com/apache/camel/pull/26737
This aligns how `DoclingProducer` handles the path-bearing values it forwards to the docling CLI. Input file paths are normalized and, when `inputBaseDirectory` is set, confined to that directory; custom CLI argument values are normalized via `validatePathSafety`. The `CamelDoclingOutputFilePath` header, by contrast, was passed straight to the `--output` flag with no normalization and no containment option. This PR: - adds an optional `outputBaseDirectory` endpoint option mirroring `inputBaseDirectory`; - normalizes the `CamelDoclingOutputFilePath` header and, when `outputBaseDirectory` is set, confines it to that directory (values resolving outside — including absolute paths — are rejected); - documents the option and behavior in the component docs and the 4.23 upgrade guide; - adds `DoclingOutputPathValidationTest`. Both `inputBaseDirectory` and `outputBaseDirectory` are unset by default, so existing routes are unaffected. JIRA: https://issues.apache.org/jira/browse/CAMEL-24894 _Claude Code on behalf of oscerd_ 🤖 Generated with [Claude Code](https://claude.com/claude-code) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
