Gregor Zurowski created CAMEL-7067:
--------------------------------------

             Summary: JcrProducer should not store all exchange properties in 
the target JCR node
                 Key: CAMEL-7067
                 URL: https://issues.apache.org/jira/browse/CAMEL-7067
             Project: Camel
          Issue Type: Bug
          Components: camel-jcr
    Affects Versions: 2.12.2
            Reporter: Gregor Zurowski


The CamelJcrInsert operation in JcrProducer stores all exchange properties in 
the target JCR node including all Camel properties that are found in the 
incoming exchange. This means that non-relevant data is persisted in JCR nodes 
including sensitive information such as username and password that is part of 
the URI in the CamelToEndpoint exchange property. Other examples of such 
properties include CamelJcrNodeName and CamelExternalRedelivered.



--
This message was sent by Atlassian JIRA
(v6.1.4#6159)

Reply via email to