[PR] CAMEL-24655: camel-coap - guard case-insensitive header filtering, backport to camel-4.22.x [camel]

["davsclaus (via GitHub)" <gi...@apache.org>]

davsclaus opened a new pull request, #26216:
URL: https://github.com/apache/camel/pull/26216

   ## Backport of #26208
   
   Straight cherry-pick of #26208 (commit `e6e5621639a1`) onto `camel-4.22.x`. No conflicts, no manual changes.
   
   **Original PR:** #26208 — CAMEL-24655: add regression test for case-insensitive Camel header filtering in the CoAP consumer
   **Original author:** @oscerd
   **Target branch:** `camel-4.22.x`
   
   ### Why backport
   
   The test guards the CVE-2025-27636 class of bug: the CoAP consumer maps incoming URI query parameters into Exchange headers, and the `HeaderFilterStrategy` call is what stops a remote peer from setting `Camel*` internal headers. `camel-4.22.x` carries the same `CamelCoapResource#handleRequest` code (the `applyFilterToExternalHeaders` call is present at the same place), so the branch benefits from the same regression guard.
   
   This is a **test-only** change — no production code is modified.
   
   ### Verification
   
   - `mvn test -Dtest=CoAPHeaderInjectionTest` in `components/camel-coap` on this branch: **1 test, green**.
   
   _Claude Code on behalf of @davsclaus_


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@camel.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] CAMEL-24655: camel-coap - guard case-insensitive header filtering, backport to camel-4.22.x [camel]

["gnodet (via GitHub)" <gi...@apache.org>]

gnodet merged PR #26216:
URL: https://github.com/apache/camel/pull/26216


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@camel.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] CAMEL-24655: camel-coap - guard case-insensitive header filtering, backport to camel-4.22.x [camel]

["github-actions[bot] (via GitHub)" <gi...@apache.org>]

github-actions[bot] commented on PR #26216:
URL: https://github.com/apache/camel/pull/26216#issuecomment-5591506586

   <!-- ci-tested-modules -->
   :test_tube: **CI tested the following changed modules:**
   
   - `components/camel-coap`
   
   ---
   
   <details><summary>:microscope: Scalpel shadow comparison — Scalpel: 1 tested, 0 compile-only — current: 9 all tested</summary>
   
   [Maveniverse Scalpel](https://github.com/maveniverse/scalpel) detected **1 affected modules** (current approach: 9).
   
   <details><summary>Modules only in current approach (8)</summary>
   
   - `camel-jbang-mcp`
   - `camel-jbang-plugin-mcp`
   - `camel-jbang-plugin-route-parser`
   - `camel-jbang-plugin-tui`
   - `camel-jbang-plugin-validate`
   - `camel-launcher-container`
   - `camel-yaml-dsl-validator`
   - `camel-yaml-dsl-validator-maven-plugin`
   
   </details>
   
   **Skip-tests mode would test 1 modules** (1 direct + 0 downstream), **skip tests for 0** (generated code, meta-modules)
   
   <details><summary>Modules Scalpel would test (1)</summary>
   
   - `camel-coap`
   
   </details>
   
   > :information_source: Shadow mode — Scalpel observes but does not affect test execution. [Learn more](https://github.com/maveniverse/scalpel)
   
   </details>
   
   <details><summary>All tested modules (9 modules)</summary>
   
   - Camel :: CoAP
   - Camel :: JBang :: MCP
   - Camel :: JBang :: Plugin :: MCP
   - Camel :: JBang :: Plugin :: Route Parser
   - Camel :: JBang :: Plugin :: TUI
   - Camel :: JBang :: Plugin :: Validate
   - Camel :: Launcher :: Container
   - Camel :: YAML DSL :: Validator
   - Camel :: YAML DSL :: Validator Maven Plugin
   
   </details>
   
   ---
   :gear: [View full build and test results](https://github.com/apache/camel/actions/runs/34261835868)


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@camel.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] CAMEL-24655: camel-coap - guard case-insensitive header filtering, backport to camel-4.22.x [camel]

["github-actions[bot] (via GitHub)" <gi...@apache.org>]

github-actions[bot] commented on PR #26216:
URL: https://github.com/apache/camel/pull/26216#issuecomment-5591482518

   :star2: Thank you for your contribution to the Apache Camel project! :star2:
     :robot: CI automation will test this PR automatically.
   
     :camel: Apache Camel Committers, please review the following items:
   
     * First-time contributors **require MANUAL approval** for the GitHub Actions to run
     * You can use the command `/component-test (camel-)component-name1 (camel-)component-name2..` to request a test from the test bot although they are normally detected and executed by CI.
     * You can label PRs using `skip-tests` and `test-dependents` to fine-tune the checks executed by this PR.
     * Build and test logs are available in the summary page. **Only** [Apache Camel committers](https://camel.apache.org/community/team/#committers) have access to the summary.
     
     :warning: Be careful when sharing logs. Review their contents before sharing them publicly.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@camel.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org