You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@camel.apache.org by bu...@apache.org on 2015/12/17 11:27:32 UTC
svn commit: r975788 [1/2] - in /websites/production/camel/content: ./
2015/12/17/ cache/
Author: buildbot
Date: Thu Dec 17 10:27:31 2015
New Revision: 975788
Log:
Production update by buildbot for camel
Added:
websites/production/camel/content/2015/12/17/
websites/production/camel/content/2015/12/17/cve-2015-5348-apache-camel-medium-disclosure-vulnerability.html
websites/production/camel/content/cache/main.pageCache (with props)
Modified:
websites/production/camel/content/book-component-appendix.html
websites/production/camel/content/book-in-one-page.html
websites/production/camel/content/book-pattern-appendix.html
websites/production/camel/content/book-tutorials.html
websites/production/camel/content/elasticsearch.html
websites/production/camel/content/index.html
websites/production/camel/content/news.html
websites/production/camel/content/properties.html
websites/production/camel/content/siteindex.html
websites/production/camel/content/sitemap.html
websites/production/camel/content/throttler.html
websites/production/camel/content/using-propertyplaceholder.html
Added: websites/production/camel/content/2015/12/17/cve-2015-5348-apache-camel-medium-disclosure-vulnerability.html
==============================================================================
--- websites/production/camel/content/2015/12/17/cve-2015-5348-apache-camel-medium-disclosure-vulnerability.html (added)
+++ websites/production/camel/content/2015/12/17/cve-2015-5348-apache-camel-medium-disclosure-vulnerability.html Thu Dec 17 10:27:31 2015
@@ -0,0 +1,147 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
+<!--
+
+ Licensed to the Apache Software Foundation (ASF) under one or more
+ contributor license agreements. See the NOTICE file distributed with
+ this work for additional information regarding copyright ownership.
+ The ASF licenses this file to You under the Apache License, Version 2.0
+ (the "License"); you may not use this file except in compliance with
+ the License. You may obtain a copy of the License at
+
+ http://www.apache.org/licenses/LICENSE-2.0
+
+ Unless required by applicable law or agreed to in writing, software
+ distributed under the License is distributed on an "AS IS" BASIS,
+ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ See the License for the specific language governing permissions and
+ limitations under the License.
+-->
+<html>
+<head>
+ <link href="//camel.apache.org/styles/site.css" rel="stylesheet" type="text/css">
+ <link href="//camel.apache.org/styles/type-settings.css" rel="stylesheet" type="text/css">
+ <script src="//camel.apache.org/styles/prototype.js" type="text/javascript"></script>
+ <script src="//camel.apache.org/styles/rico.js" type="text/javascript"></script>
+ <script src="//camel.apache.org/styles/site.js" type="text/javascript"></script>
+
+ <meta http-equiv="Content-type" content="text/html;charset=UTF-8">
+
+ <style type="text/css">
+ .maincontent { overflow:hidden; }
+ </style>
+ <!--[if IE]>
+ <style type="text/css">
+ .maincontent { width:100%; }
+ </style>
+ <![endif]-->
+
+
+
+ <title>
+ Apache Camel: CVE-2015-5348 - Apache Camel medium disclosure vulnerability
+ </title>
+</head>
+<body>
+<div class="white_box">
+<div class="header">
+ <div class="header_l">
+ <div class="header_r">
+ </div>
+ </div>
+</div>
+<div class="content">
+ <div class="content_l">
+ <div class="content_r">
+ <div>
+ <!-- Banner -->
+<div id="banner-content"><div id="asf_logo">
+ <div id="activemq_logo" style="height:108px; background:transparent url(banner.data/apache-camel-7.png) no-repeat scroll left top;">
+ <a shape="rect" style="float:left; width:310px;display:block;text-indent:-5000px;text-decoration:none;line-height:140px; margin-top:20px; margin-left:18px;" href="http://camel.apache.org/">Camel</a>
+ <a shape="rect" style="float:right; width:180px;display:block;text-indent:-5000px;text-decoration:none;line-height:80px; margin-top:45px; margin-right:10px;" href="http://www.apache.org">Apache</a>
+ </div>
+</div></div>
+ <!-- Banner -->
+ <div class="top_red_bar">
+ <div id="site-breadcrumbs">
+ <!-- Breadcrumbs -->
+<a href="../../../index.html">Apache Camel</a> > 2015 > 12 > 17 > <a href="cve-2015-5348-apache-camel-medium-disclosure-vulnerability.html">CVE-2015-5348 - Apache Camel medium disclosure vulnerability</a>
+ </div>
+ <!-- Quicklinks -->
+<div id="site-quicklinks"><p><a shape="rect" href="download.html">Download</a> | <a shape="rect" href="javadoc.html">JavaDoc</a> | <a shape="rect" href="source.html">Source</a> | <a shape="rect" href="discussion-forums.html">Forums</a> | <a shape="rect" href="support.html">Support</a></p></div>
+ <!-- Quicklinks -->
+ </div>
+
+ <table border="0">
+ <tbody>
+ <tr>
+ <td valign="top" width="100%">
+<div class="wiki-content maincontent"><p><span style="color: rgb(34,34,34);">Apache Camel's Jetty/Servlet usage is vulnerable to Java object </span><span style="color: rgb(34,34,34);">de-serialisation vulnerability</span><br clear="none"><span style="color: rgb(34,34,34);">If using camel-jetty, or camel-servlet as a consumer in Camel routes, </span><span style="color: rgb(34,34,34);">then Camel will automatic de-serialize HTTP requests that uses the </span><span style="color: rgb(34,34,34);">content-header: application/x-java-serialized-</span><span style="color: rgb(34,34,34);">object.</span><br clear="none"><br clear="none"><span style="color: rgb(34,34,34);">Please study this security vulnerability carefully!</span></p><ul><li><span style="color: rgb(34,34,34);">CVE-2015-5348 - [1]</span></li></ul><p><span style="color: rgb(34,34,34);">You can download the fixed Apache Camel 2.15.x and 2.16.x version from the </span><span style="color: rgb(34,34,34);">Apache m
irrors [2] or from the Central Maven repository.</span><br clear="none"><br clear="none"><span style="color: rgb(34,34,34);">[1] </span><a shape="rect" class="external-link" href="http://camel.apache.org/security-advisories.data/CVE-2015-5348.txt.asc?version=1&modificationDate=1450340845000&api=v2">http://camel.apache.org/security-advisories.data/CVE-2015-5348.txt.asc?version=1&modificationDate=1450340845000&api=v2</a><br clear="none"><span style="color: rgb(34,34,34);">[2] </span><a shape="rect" class="external-link" href="http://camel.apache.org/download">http://camel.apache.org/download</a><br clear="none"><br clear="none"><span style="color: rgb(34,34,34);">On behalf of the Camel PMC,</span><br clear="none"><span style="color: rgb(34,34,34);">Claus Ibsen</span></p></div>
+ </td>
+ <td valign="top">
+ <div class="navigation">
+ <div class="navigation_top">
+ <!-- NavigationBar -->
+<div class="navigation_bottom" id="navigation_bottom"><h3 id="Navigation-Overview"><a shape="rect" href="overview.html">Overview</a></h3><ul class="alternate"><li><a shape="rect" href="index.html">Home</a></li><li><a shape="rect" href="download.html">Download</a></li><li><a shape="rect" href="getting-started.html">Getting Started</a></li><li><a shape="rect" href="faq.html">FAQ</a></li></ul><h3 id="Navigation-Documentation"><a shape="rect" href="documentation.html">Documentation</a></h3><ul class="alternate"><li><a shape="rect" href="user-guide.html">User Guide</a></li><li><a shape="rect" href="manual.html">Manual</a></li><li><a shape="rect" href="books.html">Books</a></li><li><a shape="rect" href="tutorials.html">Tutorials</a></li><li><a shape="rect" href="examples.html">Examples</a></li><li><a shape="rect" href="cookbook.html">Cookbook</a></li><li><a shape="rect" href="architecture.html">Architecture</a></li><li><a shape="rect" href="enterprise-integration-patterns.html">Enterprise
Integration Patterns</a></li><li><a shape="rect" href="dsl.html">DSL</a></li><li><a shape="rect" href="components.html">Components</a></li><li><a shape="rect" href="data-format.html">Data Format</a></li><li><a shape="rect" href="languages.html">Languages</a></li><li><a shape="rect" href="security.html">Security</a></li><li><a shape="rect" href="security-advisories.html">Security Advisories</a></li></ul><h3 id="Navigation-Search">Search</h3><form enctype="application/x-www-form-urlencoded" method="get" id="cse-search-box" action="http://www.google.com/cse">
+ <div>
+ <input type="hidden" name="cx" value="007878419884033443453:m5nhvy4hmyq">
+ <input type="hidden" name="ie" value="UTF-8">
+ <input type="text" name="q" size="21">
+ <input type="submit" name="sa" value="Search">
+ </div>
+</form>
+<script type="text/javascript" src="http://www.google.com/coop/cse/brand?form=cse-search-box&lang=en"></script><h3 id="Navigation-Community"><a shape="rect" href="community.html">Community</a></h3><ul class="alternate"><li><a shape="rect" href="support.html">Support</a></li><li><a shape="rect" href="contributing.html">Contributing</a></li><li><a shape="rect" href="discussion-forums.html">Discussion Forums</a></li><li><a shape="rect" href="mailing-lists.html">Mailing Lists</a></li><li><a shape="rect" href="user-stories.html">User Stories</a></li><li><a shape="rect" href="news.html">News</a></li><li><a shape="rect" href="articles.html">Articles</a></li><li><a shape="rect" href="site.html">Site</a></li><li><a shape="rect" href="team.html">Team</a></li><li><a shape="rect" class="external-link" href="http://camel-extra.googlecode.com/" rel="nofollow">Camel Extra</a></li></ul><h3 id="Navigation-Developers"><a shape="rect" href="developers.html">Developers</a></h3><ul class="alternate"
><li><a shape="rect" href="developers.html">Developer Guide</a></li><li><a shape="rect" href="source.html">Source</a></li><li><a shape="rect" href="building.html">Building</a></li><li><a shape="rect" href="javadoc.html">JavaDoc</a></li><li><a shape="rect" href="irc-room.html">IRC Room</a></li></ul><h3 id="Navigation-ApacheSoftwareFoundation">Apache Software Foundation</h3><ul class="alternate"><li><a shape="rect" class="external-link" href="http://www.apache.org/licenses/">License</a></li><li><a shape="rect" class="external-link" href="http://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li><li><a shape="rect" class="external-link" href="http://www.apache.org/foundation/thanks.html">Thanks</a></li><li><a shape="rect" class="external-link" href="http://www.apache.org/security/">Security</a></li></ul></div>
+ <!-- NavigationBar -->
+ </div>
+ </div>
+ </td>
+ </tr>
+ </tbody>
+ </table>
+
+
+ <div class="bottom_red_bar"></div>
+ </div>
+ </div>
+ </div>
+</div>
+<div class="black_box">
+<div class="footer">
+ <div class="footer_l">
+ <div class="footer_r">
+ <div>
+ <a href="$base/privacy-policy.html">Privacy Policy</a> -
+ (<a href="https://cwiki.apache.org/confluence/pages/editpage.action?pageId=61333122">edit page</a>)
+ (<a href="https://cwiki.apache.org/confluence/pages/viewpage.action?pageId=61333122&showComments=true&showCommentArea=true#addcomment">add comment</a>)
+ </div>
+ </div>
+ </div>
+</div>
+</div>
+</div>
+<div class="design_attribution">
+© 2004-2015 The Apache Software Foundation.
+<br>
+Apache Camel, Camel, Apache, the Apache feather logo, and the Apache Camel project logo are trademarks of The Apache Software Foundation. All other marks mentioned may be trademarks or registered trademarks of their respective owners.
+<br>
+<a href="http://hiramchirino.com">Graphic Design By Hiram</a>
+</div>
+
+<!-- Camel committers that would like access to the Analytics, send a note to private@camel.apache.org -->
+<script type="text/javascript">
+
+ var _gaq = _gaq || [];
+ _gaq.push(['_setAccount', 'UA-25976253-1']);
+ _gaq.push(['_trackPageview']);
+
+ (function() {
+ var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true;
+ ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js';
+ var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s);
+ })();
+
+</script>
+
+</body>
+</html>
+
+
Modified: websites/production/camel/content/book-component-appendix.html
==============================================================================
--- websites/production/camel/content/book-component-appendix.html (original)
+++ websites/production/camel/content/book-component-appendix.html Thu Dec 17 10:27:31 2015
@@ -1110,11 +1110,11 @@ template.send("direct:alias-verify&
]]></script>
</div></div><p></p><h3 id="BookComponentAppendix-SeeAlso.8">See Also</h3>
<ul><li><a shape="rect" href="configuring-camel.html">Configuring Camel</a></li><li><a shape="rect" href="component.html">Component</a></li><li><a shape="rect" href="endpoint.html">Endpoint</a></li><li><a shape="rect" href="getting-started.html">Getting Started</a></li></ul><ul><li><a shape="rect" href="crypto.html">Crypto</a> Crypto is also available as a <a shape="rect" href="data-format.html">Data Format</a></li></ul> <h2 id="BookComponentAppendix-CXFComponent">CXF Component</h2><div class="confluence-information-macro confluence-information-macro-note"><span class="aui-icon aui-icon-small aui-iconfont-warning confluence-information-macro-icon"></span><div class="confluence-information-macro-body"><p>When using CXF as a consumer, the <a shape="rect" href="cxf-bean-component.html">CXF Bean Component</a> allows you to factor out how message payloads are received from their processing as a RESTful or SOAP web service. This has the potential of using a multitude of transports to cons
ume web services. The bean component's configuration is also simpler and provides the fastest method to implement web services using Camel and CXF.</p></div></div><div class="confluence-information-macro confluence-information-macro-tip"><span class="aui-icon aui-icon-small aui-iconfont-approve confluence-information-macro-icon"></span><div class="confluence-information-macro-body"><p>When using CXF in streaming modes (see DataFormat option), then also read about <a shape="rect" href="stream-caching.html">Stream caching</a>.</p></div></div><p>The <strong>cxf:</strong> component provides integration with <a shape="rect" href="http://cxf.apache.org">Apache CXF</a> for connecting to JAX-WS services hosted in CXF.</p><p><style type="text/css">/*<![CDATA[*/
-div.rbtoc1450282717176 {padding: 0px;}
-div.rbtoc1450282717176 ul {list-style: disc;margin-left: 0px;}
-div.rbtoc1450282717176 li {margin-left: 0px;padding-left: 0px;}
+div.rbtoc1450347740500 {padding: 0px;}
+div.rbtoc1450347740500 ul {list-style: disc;margin-left: 0px;}
+div.rbtoc1450347740500 li {margin-left: 0px;padding-left: 0px;}
-/*]]>*/</style></p><div class="toc-macro rbtoc1450282717176">
+/*]]>*/</style></p><div class="toc-macro rbtoc1450347740500">
<ul class="toc-indentation"><li><a shape="rect" href="#BookComponentAppendix-CXFComponent">CXF Component</a>
<ul class="toc-indentation"><li><a shape="rect" href="#BookComponentAppendix-URIformat">URI format</a></li><li><a shape="rect" href="#BookComponentAppendix-Options">Options</a>
<ul class="toc-indentation"><li><a shape="rect" href="#BookComponentAppendix-Thedescriptionsofthedataformats">The descriptions of the dataformats</a>
Modified: websites/production/camel/content/book-in-one-page.html
==============================================================================
--- websites/production/camel/content/book-in-one-page.html (original)
+++ websites/production/camel/content/book-in-one-page.html Thu Dec 17 10:27:31 2015
@@ -3722,11 +3722,11 @@ The tutorial has been designed in two pa
While not actual tutorials you might find working through the source of the various <a shape="rect" href="examples.html">Examples</a> useful.</li></ul>
<h2 id="BookInOnePage-TutorialonSpringRemotingwithJMS">Tutorial on Spring Remoting with JMS</h2><p> </p><div class="confluence-information-macro confluence-information-macro-information"><p class="title">Thanks</p><span class="aui-icon aui-icon-small aui-iconfont-info confluence-information-macro-icon"></span><div class="confluence-information-macro-body"><p>This tutorial was kindly donated to Apache Camel by Martin Gilday.</p></div></div><h2 id="BookInOnePage-Preface">Preface</h2><p>This tutorial aims to guide the reader through the stages of creating a project which uses Camel to facilitate the routing of messages from a JMS queue to a <a shape="rect" class="external-link" href="http://www.springramework.org" rel="nofollow">Spring</a> service. The route works in a synchronous fashion returning a response to the client.</p><p><style type="text/css">/*<![CDATA[*/
-div.rbtoc1450300736747 {padding: 0px;}
-div.rbtoc1450300736747 ul {list-style: disc;margin-left: 0px;}
-div.rbtoc1450300736747 li {margin-left: 0px;padding-left: 0px;}
+div.rbtoc1450347632829 {padding: 0px;}
+div.rbtoc1450347632829 ul {list-style: disc;margin-left: 0px;}
+div.rbtoc1450347632829 li {margin-left: 0px;padding-left: 0px;}
-/*]]>*/</style></p><div class="toc-macro rbtoc1450300736747">
+/*]]>*/</style></p><div class="toc-macro rbtoc1450347632829">
<ul class="toc-indentation"><li><a shape="rect" href="#BookInOnePage-TutorialonSpringRemotingwithJMS">Tutorial on Spring Remoting with JMS</a></li><li><a shape="rect" href="#BookInOnePage-Preface">Preface</a></li><li><a shape="rect" href="#BookInOnePage-Prerequisites">Prerequisites</a></li><li><a shape="rect" href="#BookInOnePage-Distribution">Distribution</a></li><li><a shape="rect" href="#BookInOnePage-About">About</a></li><li><a shape="rect" href="#BookInOnePage-CreatetheCamelProject">Create the Camel Project</a>
<ul class="toc-indentation"><li><a shape="rect" href="#BookInOnePage-UpdatethePOMwithDependencies">Update the POM with Dependencies</a></li></ul>
</li><li><a shape="rect" href="#BookInOnePage-WritingtheServer">Writing the Server</a>
@@ -5831,11 +5831,11 @@ So we completed the last piece in the pi
<p>This example has been removed from <strong>Camel 2.9</strong> onwards. Apache Axis 1.4 is a very old and unsupported framework. We encourage users to use <a shape="rect" href="cxf.html">CXF</a> instead of Axis.</p></div></div>
<style type="text/css">/*<![CDATA[*/
-div.rbtoc1450300738267 {padding: 0px;}
-div.rbtoc1450300738267 ul {list-style: disc;margin-left: 0px;}
-div.rbtoc1450300738267 li {margin-left: 0px;padding-left: 0px;}
+div.rbtoc1450347633461 {padding: 0px;}
+div.rbtoc1450347633461 ul {list-style: disc;margin-left: 0px;}
+div.rbtoc1450347633461 li {margin-left: 0px;padding-left: 0px;}
-/*]]>*/</style><div class="toc-macro rbtoc1450300738267">
+/*]]>*/</style><div class="toc-macro rbtoc1450347633461">
<ul class="toc-indentation"><li><a shape="rect" href="#BookInOnePage-TutorialusingAxis1.4withApacheCamel">Tutorial using Axis 1.4 with Apache Camel</a>
<ul class="toc-indentation"><li><a shape="rect" href="#BookInOnePage-Prerequisites">Prerequisites</a></li><li><a shape="rect" href="#BookInOnePage-Distribution">Distribution</a></li><li><a shape="rect" href="#BookInOnePage-Introduction">Introduction</a></li><li><a shape="rect" href="#BookInOnePage-SettinguptheprojecttorunAxis">Setting up the project to run Axis</a>
<ul class="toc-indentation"><li><a shape="rect" href="#BookInOnePage-Maven2">Maven 2</a></li><li><a shape="rect" href="#BookInOnePage-wsdl">wsdl</a></li><li><a shape="rect" href="#BookInOnePage-ConfiguringAxis">Configuring Axis</a></li><li><a shape="rect" href="#BookInOnePage-RunningtheExample">Running the Example</a></li></ul>
@@ -17375,11 +17375,11 @@ template.send("direct:alias-verify&
]]></script>
</div></div><p></p><h3 id="BookInOnePage-SeeAlso.28">See Also</h3>
<ul><li><a shape="rect" href="configuring-camel.html">Configuring Camel</a></li><li><a shape="rect" href="component.html">Component</a></li><li><a shape="rect" href="endpoint.html">Endpoint</a></li><li><a shape="rect" href="getting-started.html">Getting Started</a></li></ul><ul><li><a shape="rect" href="crypto.html">Crypto</a> Crypto is also available as a <a shape="rect" href="data-format.html">Data Format</a></li></ul> <h2 id="BookInOnePage-CXFComponent">CXF Component</h2><div class="confluence-information-macro confluence-information-macro-note"><span class="aui-icon aui-icon-small aui-iconfont-warning confluence-information-macro-icon"></span><div class="confluence-information-macro-body"><p>When using CXF as a consumer, the <a shape="rect" href="cxf-bean-component.html">CXF Bean Component</a> allows you to factor out how message payloads are received from their processing as a RESTful or SOAP web service. This has the potential of using a multitude of transports to consume web
services. The bean component's configuration is also simpler and provides the fastest method to implement web services using Camel and CXF.</p></div></div><div class="confluence-information-macro confluence-information-macro-tip"><span class="aui-icon aui-icon-small aui-iconfont-approve confluence-information-macro-icon"></span><div class="confluence-information-macro-body"><p>When using CXF in streaming modes (see DataFormat option), then also read about <a shape="rect" href="stream-caching.html">Stream caching</a>.</p></div></div><p>The <strong>cxf:</strong> component provides integration with <a shape="rect" href="http://cxf.apache.org">Apache CXF</a> for connecting to JAX-WS services hosted in CXF.</p><p><style type="text/css">/*<![CDATA[*/
-div.rbtoc1450300800427 {padding: 0px;}
-div.rbtoc1450300800427 ul {list-style: disc;margin-left: 0px;}
-div.rbtoc1450300800427 li {margin-left: 0px;padding-left: 0px;}
+div.rbtoc1450347653224 {padding: 0px;}
+div.rbtoc1450347653224 ul {list-style: disc;margin-left: 0px;}
+div.rbtoc1450347653224 li {margin-left: 0px;padding-left: 0px;}
-/*]]>*/</style></p><div class="toc-macro rbtoc1450300800427">
+/*]]>*/</style></p><div class="toc-macro rbtoc1450347653224">
<ul class="toc-indentation"><li><a shape="rect" href="#BookInOnePage-CXFComponent">CXF Component</a>
<ul class="toc-indentation"><li><a shape="rect" href="#BookInOnePage-URIformat">URI format</a></li><li><a shape="rect" href="#BookInOnePage-Options">Options</a>
<ul class="toc-indentation"><li><a shape="rect" href="#BookInOnePage-Thedescriptionsofthedataformats">The descriptions of the dataformats</a>
Modified: websites/production/camel/content/book-pattern-appendix.html
==============================================================================
--- websites/production/camel/content/book-pattern-appendix.html (original)
+++ websites/production/camel/content/book-pattern-appendix.html Thu Dec 17 10:27:31 2015
@@ -2600,23 +2600,25 @@ from("seda:a").throttle(3).tim
</div></div><h4 id="BookPatternAppendix-Camel2.8onwards">Camel 2.8 onwards</h4><p>In Camel 2.8 onwards you must set the maximum period as an <a shape="rect" href="expression.html">Expression</a> as shown below where we use a <a shape="rect" href="constant.html">Constant</a> expression:</p><div class="code panel pdl" style="border-width: 1px;"><div class="codeContent panelContent pdl">
<script class="brush: xml; gutter: false; theme: Default" type="syntaxhighlighter"><![CDATA[
<route>
- <from uri="seda:a"/>
- <!-- throttle 3 messages per 10 sec -->
- <throttle timePeriodMillis="10000">
- <constant>3</constant>
- <to uri="mock:result"/>
- </throttle>
+ <from uri="seda:a"/>
+ <!-- throttle 3 messages per 10 sec -->
+ <throttle timePeriodMillis="10000">
+ <constant>3</constant>
+ <to uri="log:result"/>
+ <to uri="mock:result"/>
+ </throttle>
</route>
]]></script>
</div></div><h3 id="BookPatternAppendix-Dynamicallychangingmaximumrequestsperperiod">Dynamically changing maximum requests per period</h3><p><strong>Available as of Camel 2.8</strong> <br clear="none"> Since we use an <a shape="rect" href="expression.html">Expression</a> you can adjust this value at runtime, for example you can provide a header with the value. At runtime Camel evaluates the expression and converts the result to a <code>java.lang.Long</code> type. In the example below we use a header from the message to determine the maximum requests per period. If the header is absent, then the <a shape="rect" href="throttler.html">Throttler</a> uses the old value. So that allows you to only provide a header if the value is to be changed:</p><div class="code panel pdl" style="border-width: 1px;"><div class="codeContent panelContent pdl">
<script class="brush: xml; gutter: false; theme: Default" type="syntaxhighlighter"><![CDATA[
<route>
- <from uri="direct:expressionHeader"/>
- <throttle timePeriodMillis="500">
- <!-- use a header to determine how many messages to throttle per 0.5 sec -->
- <header>throttleValue</header>
- <to uri="mock:result"/>
- </throttle>
+ <from uri="direct:expressionHeader"/>
+ <throttle timePeriodMillis="500">
+ <!-- use a header to determine how many messages to throttle per 0.5 sec -->
+ <header>throttleValue</header>
+ <to uri="log:result"/>
+ <to uri="mock:result"/>
+ </throttle>
</route>
]]></script>
</div></div><h3 id="BookPatternAppendix-Asynchronousdelaying">Asynchronous delaying</h3><p><strong>Available as of Camel 2.4</strong></p><p>You can let the <a shape="rect" href="throttler.html">Throttler</a> use non blocking asynchronous delaying, which means Camel will use a scheduler to schedule a task to be executed in the future. The task will then continue routing. This allows the caller thread to not block and be able to service other messages, etc.</p><div class="code panel pdl" style="border-width: 1px;"><div class="codeContent panelContent pdl">
Modified: websites/production/camel/content/book-tutorials.html
==============================================================================
--- websites/production/camel/content/book-tutorials.html (original)
+++ websites/production/camel/content/book-tutorials.html Thu Dec 17 10:27:31 2015
@@ -143,11 +143,11 @@ The tutorial has been designed in two pa
While not actual tutorials you might find working through the source of the various <a shape="rect" href="examples.html">Examples</a> useful.</li></ul>
<h2 id="BookTutorials-TutorialonSpringRemotingwithJMS">Tutorial on Spring Remoting with JMS</h2><p> </p><div class="confluence-information-macro confluence-information-macro-information"><p class="title">Thanks</p><span class="aui-icon aui-icon-small aui-iconfont-info confluence-information-macro-icon"></span><div class="confluence-information-macro-body"><p>This tutorial was kindly donated to Apache Camel by Martin Gilday.</p></div></div><h2 id="BookTutorials-Preface">Preface</h2><p>This tutorial aims to guide the reader through the stages of creating a project which uses Camel to facilitate the routing of messages from a JMS queue to a <a shape="rect" class="external-link" href="http://www.springramework.org" rel="nofollow">Spring</a> service. The route works in a synchronous fashion returning a response to the client.</p><p><style type="text/css">/*<![CDATA[*/
-div.rbtoc1448918540329 {padding: 0px;}
-div.rbtoc1448918540329 ul {list-style: disc;margin-left: 0px;}
-div.rbtoc1448918540329 li {margin-left: 0px;padding-left: 0px;}
+div.rbtoc1450347874999 {padding: 0px;}
+div.rbtoc1450347874999 ul {list-style: disc;margin-left: 0px;}
+div.rbtoc1450347874999 li {margin-left: 0px;padding-left: 0px;}
-/*]]>*/</style></p><div class="toc-macro rbtoc1448918540329">
+/*]]>*/</style></p><div class="toc-macro rbtoc1450347874999">
<ul class="toc-indentation"><li><a shape="rect" href="#BookTutorials-TutorialonSpringRemotingwithJMS">Tutorial on Spring Remoting with JMS</a></li><li><a shape="rect" href="#BookTutorials-Preface">Preface</a></li><li><a shape="rect" href="#BookTutorials-Prerequisites">Prerequisites</a></li><li><a shape="rect" href="#BookTutorials-Distribution">Distribution</a></li><li><a shape="rect" href="#BookTutorials-About">About</a></li><li><a shape="rect" href="#BookTutorials-CreatetheCamelProject">Create the Camel Project</a>
<ul class="toc-indentation"><li><a shape="rect" href="#BookTutorials-UpdatethePOMwithDependencies">Update the POM with Dependencies</a></li></ul>
</li><li><a shape="rect" href="#BookTutorials-WritingtheServer">Writing the Server</a>
@@ -2252,11 +2252,11 @@ So we completed the last piece in the pi
<p>This example has been removed from <strong>Camel 2.9</strong> onwards. Apache Axis 1.4 is a very old and unsupported framework. We encourage users to use <a shape="rect" href="cxf.html">CXF</a> instead of Axis.</p></div></div>
<style type="text/css">/*<![CDATA[*/
-div.rbtoc1448918540664 {padding: 0px;}
-div.rbtoc1448918540664 ul {list-style: disc;margin-left: 0px;}
-div.rbtoc1448918540664 li {margin-left: 0px;padding-left: 0px;}
+div.rbtoc1450347875335 {padding: 0px;}
+div.rbtoc1450347875335 ul {list-style: disc;margin-left: 0px;}
+div.rbtoc1450347875335 li {margin-left: 0px;padding-left: 0px;}
-/*]]>*/</style><div class="toc-macro rbtoc1448918540664">
+/*]]>*/</style><div class="toc-macro rbtoc1450347875335">
<ul class="toc-indentation"><li><a shape="rect" href="#BookTutorials-TutorialusingAxis1.4withApacheCamel">Tutorial using Axis 1.4 with Apache Camel</a>
<ul class="toc-indentation"><li><a shape="rect" href="#BookTutorials-Prerequisites">Prerequisites</a></li><li><a shape="rect" href="#BookTutorials-Distribution">Distribution</a></li><li><a shape="rect" href="#BookTutorials-Introduction">Introduction</a></li><li><a shape="rect" href="#BookTutorials-SettinguptheprojecttorunAxis">Setting up the project to run Axis</a>
<ul class="toc-indentation"><li><a shape="rect" href="#BookTutorials-Maven2">Maven 2</a></li><li><a shape="rect" href="#BookTutorials-wsdl">wsdl</a></li><li><a shape="rect" href="#BookTutorials-ConfiguringAxis">Configuring Axis</a></li><li><a shape="rect" href="#BookTutorials-RunningtheExample">Running the Example</a></li></ul>
Added: websites/production/camel/content/cache/main.pageCache
==============================================================================
Binary file - no diff available.
Propchange: websites/production/camel/content/cache/main.pageCache
------------------------------------------------------------------------------
svn:mime-type = application/octet-stream
Modified: websites/production/camel/content/elasticsearch.html
==============================================================================
--- websites/production/camel/content/elasticsearch.html (original)
+++ websites/production/camel/content/elasticsearch.html Thu Dec 17 10:27:31 2015
@@ -96,7 +96,7 @@
</div></div><h3 id="ElasticSearch-URIformat">URI format</h3><div class="code panel pdl" style="border-width: 1px;"><div class="codeContent panelContent pdl">
<script class="brush: java; gutter: false; theme: Default" type="syntaxhighlighter"><![CDATA[elasticsearch://clusterName[?options]
]]></script>
-</div></div><div class="confluence-information-macro confluence-information-macro-tip"><span class="aui-icon aui-icon-small aui-iconfont-approve confluence-information-macro-icon"></span><div class="confluence-information-macro-body"><p>if you want to run against a local (in JVM/classloader) ElasticSearch server, just set the clusterName value in the URI to "local". See the <a shape="rect" class="external-link" href="http://www.elasticsearch.org/guide/reference/java-api/client.html" rel="nofollow">client guide</a> for more details.</p></div></div><h3 id="ElasticSearch-EndpointOptions">Endpoint Options</h3><p>The following options may be configured on the ElasticSearch endpoint. All are required to be set as either an endpoint URI parameter or as a header (headers override endpoint properties)</p><div class="table-wrap"><table class="confluenceTable"><tbody><tr><th colspan="1" rowspan="1" class="confluenceTh"><p>name</p></th><th colspan="1" rowspan="1" class="confluenceTh"><p>descrip
tion</p></th></tr><tr><td colspan="1" rowspan="1" class="confluenceTd"><p>operation</p></td><td colspan="1" rowspan="1" class="confluenceTd"><p>required, indicates the operation to perform</p></td></tr><tr><td colspan="1" rowspan="1" class="confluenceTd"><p>indexName</p></td><td colspan="1" rowspan="1" class="confluenceTd"><p>the name of the index to act against</p></td></tr><tr><td colspan="1" rowspan="1" class="confluenceTd"><p>indexType</p></td><td colspan="1" rowspan="1" class="confluenceTd"><p>the type of the index to act against</p></td></tr><tr><td colspan="1" rowspan="1" class="confluenceTd"><p>ip</p></td><td colspan="1" rowspan="1" class="confluenceTd"><p>the TransportClient remote host ip to use <strong>Camel 2.12</strong></p></td></tr><tr><td colspan="1" rowspan="1" class="confluenceTd"><p>port</p></td><td colspan="1" rowspan="1" class="confluenceTd"><p>the TransportClient remote port to use (defaults to 9300) <strong>Camel 2.12</strong></p></td></tr><tr><td colspan="1" r
owspan="1" class="confluenceTd"><p>transportAddresses</p></td><td colspan="1" rowspan="1" class="confluenceTd"><p><span>comma separated list with <em>ip:port</em> formatted remote transport addresses to use <strong>Camel 2.16</strong></span></p><p><span>Options <em>ip</em> and <em>port</em> must be left blank for <em>transportAddresses</em> to be considered instead</span>.</p></td></tr><tr><td colspan="1" rowspan="1" class="confluenceTd"><p>consistencyLevel</p></td><td colspan="1" rowspan="1" class="confluenceTd"><p>the write consistency level to use with INDEX and BULK <span>operations</span> (can be any of <span>ONE, QUORUM, ALL or DEFAULT</span>) <strong>Camel 2.16</strong></p></td></tr><tr><td colspan="1" rowspan="1" class="confluenceTd"><p>replicationType</p></td><td colspan="1" rowspan="1" class="confluenceTd"><p>the replication type to use with INDEX<span> and BULK</span> operations (can be any of SYNC, ASYNC or DEFAULT) <strong>Camel 2.16</strong></p><p><strong>From version
2.17 replicationType option has been removed, since from elasticsearch 2.0.0 the async replication has been removed.</strong></p></td></tr><tr><td colspan="1" rowspan="1" class="confluenceTd"><p>parent</p></td><td colspan="1" rowspan="1" class="confluenceTd"><p><span style="color: rgb(34,34,34);">optionally used with INDEX operations for Elasticsearch <a shape="rect" class="external-link" href="https://www.elastic.co/guide/en/elasticsearch/guide/current/parent-child.html" rel="nofollow">Parent-Child relationships</a> to specify the ID of the parent record <strong>Camel 2.16.1 / 2.17.0</strong></span></p></td></tr></tbody></table></div><h3 id="ElasticSearch-MessageOperations">Message Operations</h3><p>The following ElasticSearch operations are currently supported. Simply set an endpoint URI option or exchange header with a key of "operation" and a value set to one of the following. Some operations also require other parameters or the message body to be set.</p><div class="table-wrap"
><table class="confluenceTable"><tbody><tr><th colspan="1" rowspan="1" class="confluenceTh"><p>operation</p></th><th colspan="1" rowspan="1" class="confluenceTh"><p>message body</p></th><th colspan="1" rowspan="1" class="confluenceTh"><p>description</p></th></tr><tr><td colspan="1" rowspan="1" class="confluenceTd"><p>INDEX</p></td><td colspan="1" rowspan="1" class="confluenceTd"><p>Map, String, byte[] or XContentBuilder content to index</p></td><td colspan="1" rowspan="1" class="confluenceTd"><p>adds content to an index and returns the content's indexId in the body.</p><p><strong>Camel 2.15,</strong> you can set the <span style="line-height: 1.4285715;">indexId by setting the message header with the key "indexId".</span></p></td></tr><tr><td colspan="1" rowspan="1" class="confluenceTd"><p>GET_BY_ID</p></td><td colspan="1" rowspan="1" class="confluenceTd"><p>index id of content to retrieve</p></td><td colspan="1" rowspan="1" class="confluenceTd"><p>retrieves the specified index and r
eturns a GetResult object in the body</p></td></tr><tr><td colspan="1" rowspan="1" class="confluenceTd"><p>DELETE</p></td><td colspan="1" rowspan="1" class="confluenceTd"><p>index id of content to delete</p></td><td colspan="1" rowspan="1" class="confluenceTd"><p>deletes the specified indexId and returns a DeleteResult object in the body</p></td></tr><tr><td colspan="1" rowspan="1" class="confluenceTd"><p class="p1">BULK_INDEX</p></td><td colspan="1" rowspan="1" class="confluenceTd"><p>a <strong>List</strong> or <strong>Collection</strong> of any type that is already accepted (XContentBuilder, Map, byte[], String)</p></td><td colspan="1" rowspan="1" class="confluenceTd"><p><strong>Camel 2.14, </strong>adds content to an index and return a List of the id of the successfully indexed documents in the body</p></td></tr><tr><td colspan="1" rowspan="1" class="confluenceTd"><p>BULK</p></td><td colspan="1" rowspan="1" class="confluenceTd"><p><span>a </span><strong>L
ist</strong><span> or </span><strong>Collection</strong><span> of any type that is already accepted (XContentBuilder, Map, byte[], String)</span></p></td><td colspan="1" rowspan="1" class="confluenceTd"><p><strong>Camel 2.15:</strong> Adds content to an index and returns the BulkResponse object in the body</p></td></tr><tr><td colspan="1" rowspan="1" class="confluenceTd"><p>SEARCH</p></td><td colspan="1" rowspan="1" class="confluenceTd"><p>Map or SearchRequest Object</p></td><td colspan="1" rowspan="1" class="confluenceTd"><strong>Camel 2.15:</strong><span> search the content with the map of query string</span></td></tr><tr><td colspan="1" rowspan="1" class="confluenceTd"><p>MULTIGET</p></td><td colspan="1" rowspan="1" class="confluenceTd"><p>List of MultigetRequest.Item object</p></td><td colspan="1" rowspan="1" class="confluenceTd"><strong>Camel 2.17:</strong><span> <span>retrieves the specified indexes, types etc. in MultigetRequest and returns a MultigetResponse o
bject in the body</span></span></td></tr><tr><td colspan="1" rowspan="1" class="confluenceTd">UPDATE</td><td colspan="1" rowspan="1" class="confluenceTd"><span>Map, String, byte[] or XContentBuilder content to update</span></td><td colspan="1" rowspan="1" class="confluenceTd"><strong>Camel 2.17:</strong> Updates content to an index <span>and returns the content's indexId in the body.</span></td></tr></tbody></table></div><h3 id="ElasticSearch-IndexExample">Index Example</h3><p>Below is a simple INDEX example</p><div class="code panel pdl" style="border-width: 1px;"><div class="codeContent panelContent pdl">
+</div></div><div class="confluence-information-macro confluence-information-macro-tip"><span class="aui-icon aui-icon-small aui-iconfont-approve confluence-information-macro-icon"></span><div class="confluence-information-macro-body"><p>if you want to run against a local (in JVM/classloader) ElasticSearch server, just set the clusterName value in the URI to "local". See the <a shape="rect" class="external-link" href="http://www.elasticsearch.org/guide/reference/java-api/client.html" rel="nofollow">client guide</a> for more details.</p></div></div><h3 id="ElasticSearch-EndpointOptions">Endpoint Options</h3><p>The following options may be configured on the ElasticSearch endpoint. All are required to be set as either an endpoint URI parameter or as a header (headers override endpoint properties)</p><div class="table-wrap"><table class="confluenceTable"><tbody><tr><th colspan="1" rowspan="1" class="confluenceTh"><p>name</p></th><th colspan="1" rowspan="1" class="confluenceTh"><p>descrip
tion</p></th></tr><tr><td colspan="1" rowspan="1" class="confluenceTd"><p>operation</p></td><td colspan="1" rowspan="1" class="confluenceTd"><p>required, indicates the operation to perform</p></td></tr><tr><td colspan="1" rowspan="1" class="confluenceTd"><p>indexName</p></td><td colspan="1" rowspan="1" class="confluenceTd"><p>the name of the index to act against</p></td></tr><tr><td colspan="1" rowspan="1" class="confluenceTd"><p>indexType</p></td><td colspan="1" rowspan="1" class="confluenceTd"><p>the type of the index to act against</p></td></tr><tr><td colspan="1" rowspan="1" class="confluenceTd"><p>ip</p></td><td colspan="1" rowspan="1" class="confluenceTd"><p>the TransportClient remote host ip to use <strong>Camel 2.12</strong></p></td></tr><tr><td colspan="1" rowspan="1" class="confluenceTd"><p>port</p></td><td colspan="1" rowspan="1" class="confluenceTd"><p>the TransportClient remote port to use (defaults to 9300) <strong>Camel 2.12</strong></p></td></tr><tr><td colspan="1" r
owspan="1" class="confluenceTd"><p>transportAddresses</p></td><td colspan="1" rowspan="1" class="confluenceTd"><p><span>comma separated list with <em>ip:port</em> formatted remote transport addresses to use <strong>Camel 2.16</strong></span></p><p><span>Options <em>ip</em> and <em>port</em> must be left blank for <em>transportAddresses</em> to be considered instead</span>.</p></td></tr><tr><td colspan="1" rowspan="1" class="confluenceTd"><p>consistencyLevel</p></td><td colspan="1" rowspan="1" class="confluenceTd"><p>the write consistency level to use with INDEX and BULK <span>operations</span> (can be any of <span>ONE, QUORUM, ALL or DEFAULT</span>) <strong>Camel 2.16</strong></p></td></tr><tr><td colspan="1" rowspan="1" class="confluenceTd"><p>replicationType</p></td><td colspan="1" rowspan="1" class="confluenceTd"><p>the replication type to use with INDEX<span> and BULK</span> operations (can be any of SYNC, ASYNC or DEFAULT) <strong>Camel 2.16</strong></p><p><strong>From version
2.17 replicationType option has been removed, since from elasticsearch 2.0.0 the async replication has been removed.</strong></p></td></tr><tr><td colspan="1" rowspan="1" class="confluenceTd"><p>parent</p></td><td colspan="1" rowspan="1" class="confluenceTd"><p><span style="color: rgb(34,34,34);">optionally used with INDEX operations for Elasticsearch <a shape="rect" class="external-link" href="https://www.elastic.co/guide/en/elasticsearch/guide/current/parent-child.html" rel="nofollow">Parent-Child relationships</a> to specify the ID of the parent record <strong>Camel 2.16.1 / 2.17.0</strong></span></p></td></tr><tr><td colspan="1" rowspan="1" class="confluenceTd"><p><span>clientTransportSniff</span></p></td><td colspan="1" rowspan="1" class="confluenceTd"><p><span style="color: rgb(34,34,34);"><strong>From Camel 2.17 </strong>Define if the client is allowed to sniff the rest of the cluster</span></p></td></tr></tbody></table></div><h3 id="ElasticSearch-MessageOperations">Message O
perations</h3><p>The following ElasticSearch operations are currently supported. Simply set an endpoint URI option or exchange header with a key of "operation" and a value set to one of the following. Some operations also require other parameters or the message body to be set.</p><div class="table-wrap"><table class="confluenceTable"><tbody><tr><th colspan="1" rowspan="1" class="confluenceTh"><p>operation</p></th><th colspan="1" rowspan="1" class="confluenceTh"><p>message body</p></th><th colspan="1" rowspan="1" class="confluenceTh"><p>description</p></th></tr><tr><td colspan="1" rowspan="1" class="confluenceTd"><p>INDEX</p></td><td colspan="1" rowspan="1" class="confluenceTd"><p>Map, String, byte[] or XContentBuilder content to index</p></td><td colspan="1" rowspan="1" class="confluenceTd"><p>adds content to an index and returns the content's indexId in the body.</p><p><strong>Camel 2.15,</strong> you can set the <span style="line-height: 1.4285715;">indexId by setting the message
header with the key "indexId".</span></p></td></tr><tr><td colspan="1" rowspan="1" class="confluenceTd"><p>GET_BY_ID</p></td><td colspan="1" rowspan="1" class="confluenceTd"><p>index id of content to retrieve</p></td><td colspan="1" rowspan="1" class="confluenceTd"><p>retrieves the specified index and returns a GetResult object in the body</p></td></tr><tr><td colspan="1" rowspan="1" class="confluenceTd"><p>DELETE</p></td><td colspan="1" rowspan="1" class="confluenceTd"><p>index id of content to delete</p></td><td colspan="1" rowspan="1" class="confluenceTd"><p>deletes the specified indexId and returns a DeleteResult object in the body</p></td></tr><tr><td colspan="1" rowspan="1" class="confluenceTd"><p class="p1">BULK_INDEX</p></td><td colspan="1" rowspan="1" class="confluenceTd"><p>a <strong>List</strong> or <strong>Collection</strong> of any type that is already accepted (XContentBuilder, Map, byte[], String)</p></td><td colspan="1" rowspan="1" class="confluenceTd"><p><
strong>Camel 2.14, </strong>adds content to an index and return a List of the id of the successfully indexed documents in the body</p></td></tr><tr><td colspan="1" rowspan="1" class="confluenceTd"><p>BULK</p></td><td colspan="1" rowspan="1" class="confluenceTd"><p><span>a </span><strong>List</strong><span> or </span><strong>Collection</strong><span> of any type that is already accepted (XContentBuilder, Map, byte[], String)</span></p></td><td colspan="1" rowspan="1" class="confluenceTd"><p><strong>Camel 2.15:</strong> Adds content to an index and returns the BulkResponse object in the body</p></td></tr><tr><td colspan="1" rowspan="1" class="confluenceTd"><p>SEARCH</p></td><td colspan="1" rowspan="1" class="confluenceTd"><p>Map or SearchRequest Object</p></td><td colspan="1" rowspan="1" class="confluenceTd"><strong>Camel 2.15:</strong><span> search the content with the map of query string</span></td></tr><tr><td colspan="1" rowspan="1" class="confluenceTd"><p
>MULTIGET</p></td><td colspan="1" rowspan="1" class="confluenceTd"><p>List of MultigetRequest.Item object</p></td><td colspan="1" rowspan="1" class="confluenceTd"><strong>Camel 2.17:</strong><span> <span>retrieves the specified indexes, types etc. in MultigetRequest and returns a MultigetResponse object in the body</span></span></td></tr><tr><td colspan="1" rowspan="1" class="confluenceTd">UPDATE</td><td colspan="1" rowspan="1" class="confluenceTd"><span>Map, String, byte[] or XContentBuilder content to update</span></td><td colspan="1" rowspan="1" class="confluenceTd"><strong>Camel 2.17:</strong> Updates content to an index <span>and returns the content's indexId in the body.</span></td></tr></tbody></table></div><h3 id="ElasticSearch-IndexExample">Index Example</h3><p>Below is a simple INDEX example</p><div class="code panel pdl" style="border-width: 1px;"><div class="codeContent panelContent pdl">
<script class="brush: java; gutter: false; theme: Default" type="syntaxhighlighter"><![CDATA[from("direct:index")
.to("elasticsearch://local?operation=INDEX&indexName=twitter&indexType=tweet");
]]></script>
Modified: websites/production/camel/content/index.html
==============================================================================
--- websites/production/camel/content/index.html (original)
+++ websites/production/camel/content/index.html Thu Dec 17 10:27:31 2015
@@ -99,6 +99,26 @@ There's a great discussion about Camel a
</p><div class="blog-post-listing">
<div class="logo-heading-block">
<span class="logoBlock">
+ <a shape="rect" class="userLogoLink" href=" /confluence/display/~davsclaus ">
+ <img class="userLogo logo" src="/images/confluence/icons/profilepics/default.png" alt="User icon: davsclaus" title="davsclaus">
+ </a> </span>
+ <span class="blogHeading">
+ <a shape="rect" class="blogHeading" href="2015/12/17/cve-2015-5348-apache-camel-medium-disclosure-vulnerability.html">CVE-2015-5348 - Apache Camel medium disclosure vulnerability</a>
+ </span><div class="page-metadata not-personal"> <a shape="rect" class="url fn confluence-userlink" href=" /confluence/display/~davsclaus ">Claus Ibsen</a> posted on Dec 17, 2015</div>
+
+ </div>
+
+ <div class="wiki-content">
+ <p><span style="color: rgb(34,34,34);">Apache Camel's Jetty/Servlet usage is vulnerable to Java object </span><span style="color: rgb(34,34,34);">de-serialisation vulnerability</span><br clear="none"><span style="color: rgb(34,34,34);">If using camel-jetty, or camel-servlet as a consumer in Camel routes, </span><span style="color: rgb(34,34,34);">then Camel will automatic de-serialize HTTP requests that uses the </span><span style="color: rgb(34,34,34);">content-header: application/x-java-serialized-</span><span style="color: rgb(34,34,34);">object.</span><br clear="none"><br clear="none"><span style="color: rgb(34,34,34);">Please study this security vulnerability carefully!</span></p><ul><li><span style="color: rgb(34,34,34);">CVE-2015-5348 - [1]</span></li></ul><p><span style="color: rgb(34,34,34);">You can download the fixed Apache Camel 2.15.x and 2.16.x version from the </span><span style="color: rgb(34,34,34);">Apache mirrors [2] or from the Central
Maven repository.</span><br clear="none"><br clear="none"><span style="color: rgb(34,34,34);">[1] </span><a shape="rect" class="external-link" href="http://camel.apache.org/security-advisories.data/CVE-2015-5348.txt.asc?version=1&modificationDate=1450340845000&api=v2">http://camel.apache.org/security-advisories.data/CVE-2015-5348.txt.asc?version=1&modificationDate=1450340845000&api=v2</a><br clear="none"><span style="color: rgb(34,34,34);">[2] </span><a shape="rect" class="external-link" href="http://camel.apache.org/download">http://camel.apache.org/download</a><br clear="none"><br clear="none"><span style="color: rgb(34,34,34);">On behalf of the Camel PMC,</span><br clear="none"><span style="color: rgb(34,34,34);">Claus Ibsen</span></p>
+ </div>
+
+
+ </div>
+
+
+<div class="blog-post-listing">
+ <div class="logo-heading-block">
+ <span class="logoBlock">
<a shape="rect" class="userLogoLink" href=" /confluence/display/~muellerc ">
<img class="userLogo logo" src="index.userimage/muellerc-38851-pp-christian.png" alt="User icon: muellerc" title="muellerc">
</a> </span>
@@ -193,26 +213,6 @@ There's a great discussion about Camel a
</div>
- </div>
-
-
-<div class="blog-post-listing">
- <div class="logo-heading-block">
- <span class="logoBlock">
- <a shape="rect" class="userLogoLink" href=" /confluence/display/~muellerc ">
- <img class="userLogo logo" src="index.userimage/muellerc-38851-pp-christian.png" alt="User icon: muellerc" title="muellerc">
- </a> </span>
- <span class="blogHeading">
- <a shape="rect" class="blogHeading" href="2015/10/14/welcome-sergey-beryozkin-as-camel-committer.html">Welcome Sergey Beryozkin as Camel committer</a>
- </span><div class="page-metadata not-personal"> <a shape="rect" class="url fn confluence-userlink" href=" /confluence/display/~muellerc ">Christian Mueller</a> posted on Oct 14, 2015</div>
-
- </div>
-
- <div class="wiki-content">
- <p>The Apache Camel PMC is pleased to introduce Sergey Beryozkin as a new committer. We are very happy with the sustained growth of the project and look forward to continued contributions from the community and adding to the ranks of Camel Riders. Sergey was involved with Camel for well over long time now, especially with Camel CXF. He contributed to the code and got involved with the community on the mailing lists.</p><p> </p><p>On behalf of the Camel PMC, welcome aboard and we expect more great things coming from you!</p><p> </p><p>Christian Müller,</p><p>VP, Apache Camel</p>
- </div>
-
-
</div>
<p><a shape="rect" href="https://cwiki.apache.org/confluence/createrssfeed.action?types=blogpost&spaces=CAMEL&title=Apache+Camel+News&sort=modified&maxResults=10&timeSpan=60&showContent=true&confirm=Create+RSS+Feed">RSS Feed</a></p><h3 id="Index-Links">Links</h3><ul><li><a shape="rect" href="getting-started.html">Getting Started</a></li><li><a shape="rect" href="architecture.html">Architecture</a></li><li><a shape="rect" href="user-guide.html">User Guide</a></li><li><a shape="rect" href="enterprise-integration-patterns.html">Enterprise Integration Patterns</a></li><li><a shape="rect" href="news.html">More News</a></li></ul></div>
</td>
Modified: websites/production/camel/content/news.html
==============================================================================
--- websites/production/camel/content/news.html (original)
+++ websites/production/camel/content/news.html Thu Dec 17 10:27:31 2015
@@ -84,6 +84,26 @@
<div class="blog-post-listing">
<div class="logo-heading-block">
<span class="logoBlock">
+ <a shape="rect" class="userLogoLink" href=" /confluence/display/~davsclaus ">
+ <img class="userLogo logo" src="/images/confluence/icons/profilepics/default.png" alt="User icon: davsclaus" title="davsclaus">
+ </a> </span>
+ <span class="blogHeading">
+ <a shape="rect" class="blogHeading" href="2015/12/17/cve-2015-5348-apache-camel-medium-disclosure-vulnerability.html">CVE-2015-5348 - Apache Camel medium disclosure vulnerability</a>
+ </span><div class="page-metadata not-personal"> <a shape="rect" class="url fn confluence-userlink" href=" /confluence/display/~davsclaus ">Claus Ibsen</a> posted on Dec 17, 2015</div>
+
+ </div>
+
+ <div class="wiki-content">
+ <p><span style="color: rgb(34,34,34);">Apache Camel's Jetty/Servlet usage is vulnerable to Java object </span><span style="color: rgb(34,34,34);">de-serialisation vulnerability</span><br clear="none"><span style="color: rgb(34,34,34);">If using camel-jetty, or camel-servlet as a consumer in Camel routes, </span><span style="color: rgb(34,34,34);">then Camel will automatic de-serialize HTTP requests that uses the </span><span style="color: rgb(34,34,34);">content-header: application/x-java-serialized-</span><span style="color: rgb(34,34,34);">object.</span><br clear="none"><br clear="none"><span style="color: rgb(34,34,34);">Please study this security vulnerability carefully!</span></p><ul><li><span style="color: rgb(34,34,34);">CVE-2015-5348 - [1]</span></li></ul><p><span style="color: rgb(34,34,34);">You can download the fixed Apache Camel 2.15.x and 2.16.x version from the </span><span style="color: rgb(34,34,34);">Apache mirrors [2] or from the Central
Maven repository.</span><br clear="none"><br clear="none"><span style="color: rgb(34,34,34);">[1] </span><a shape="rect" class="external-link" href="http://camel.apache.org/security-advisories.data/CVE-2015-5348.txt.asc?version=1&modificationDate=1450340845000&api=v2">http://camel.apache.org/security-advisories.data/CVE-2015-5348.txt.asc?version=1&modificationDate=1450340845000&api=v2</a><br clear="none"><span style="color: rgb(34,34,34);">[2] </span><a shape="rect" class="external-link" href="http://camel.apache.org/download">http://camel.apache.org/download</a><br clear="none"><br clear="none"><span style="color: rgb(34,34,34);">On behalf of the Camel PMC,</span><br clear="none"><span style="color: rgb(34,34,34);">Claus Ibsen</span></p>
+ </div>
+
+
+ </div>
+
+
+<div class="blog-post-listing">
+ <div class="logo-heading-block">
+ <span class="logoBlock">
<a shape="rect" class="userLogoLink" href=" /confluence/display/~muellerc ">
<img class="userLogo logo" src="news.userimage/muellerc-38851-pp-christian.png" alt="User icon: muellerc" title="muellerc">
</a> </span>
@@ -458,26 +478,6 @@
</div>
- </div>
-
-
-<div class="blog-post-listing">
- <div class="logo-heading-block">
- <span class="logoBlock">
- <a shape="rect" class="userLogoLink" href=" /confluence/display/~muellerc ">
- <img class="userLogo logo" src="news.userimage/muellerc-38851-pp-christian.png" alt="User icon: muellerc" title="muellerc">
- </a> </span>
- <span class="blogHeading">
- <a shape="rect" class="blogHeading" href="2014/11/09/welcome-colm-o-heigeartaigh-as-the-newest-camel-rider.html">Welcome Colm O hEigeartaigh as the newest Camel Rider</a>
- </span><div class="page-metadata not-personal"> <a shape="rect" class="url fn confluence-userlink" href=" /confluence/display/~muellerc ">Christian Mueller</a> posted on Nov 09, 2014</div>
-
- </div>
-
- <div class="wiki-content">
- <p>Six days ago the Camel PMC voted another one of the very active and talented contributors to become a committer.</p><p> </p><p>Colm O hEigeartaigh is actively involved with Apache Camel since months contributing code and helping other users. Colm proactively worked on reported issues and took them to resolution acting as a committer. He is an Apache Member and already in the PMC for Apache CXF, Incubator, Santaurio (chair), Syncope and WS and know how Apache works. In recognition of his work, the PMC only had to take care of the simple task of making that official. A few days ago, Colm got his committer account setup, concluding the process of becoming the newest Camel rider. Stay tuned for his first official commit. (wink)</p><p> </p><p>On behalf of the Camel PMC, welcome aboard Colm and keep up the great work!</p><p>Christian</p><p> </p><p> </p>
- </div>
-
-
</div>
</div>
</td>
Modified: websites/production/camel/content/properties.html
==============================================================================
--- websites/production/camel/content/properties.html (original)
+++ websites/production/camel/content/properties.html Thu Dec 17 10:27:31 2015
@@ -451,7 +451,9 @@ greeting=Bye
<!-- blueprint property placeholders, that will use etc/stuff.cfg as the properties file -->
<cm:property-placeholder persistent-id="stuff" update-strategy="reload">
<cm:default-properties>
- <cm:property name="destination" value="to-be-replaced" />
+ <cm:property name="greeting" value="Hello" />
+ <cm:property name="echo" value="Hey" />
+ <cm:property name="destination" value="mock:original" />
</cm:default-properties>
</cm:property-placeholder>
@@ -478,8 +480,8 @@ greeting=Bye
</div></div>And in the unit test class we do as follows:<div class="code panel pdl" style="border-width: 1px;"><div class="codeContent panelContent pdl">
<script class="brush: java; gutter: false; theme: Default" type="syntaxhighlighter"><![CDATA[
/**
- * This example will load a Blueprint .cfdg file, and also override its property placeholders from this unit test
- * source code directly.
+ * This example will load a Blueprint .cfg file (which will initialize configadmin), and also override its property
+ * placeholders from this unit test source code directly (the change will reload blueprint container).
*/
public class ConfigAdminLoadConfigurationFileAndOverrideTest extends CamelBlueprintTestSupport {
@@ -506,7 +508,11 @@ public class ConfigAdminLoadConfiguratio
@Test
public void testConfigAdmin() throws Exception {
- // regular unit test method
+ // mock:original comes from <cm:default-properties>/<cm:property name="destination" value="mock:original" />
+ getMockEndpoint("mock:original").setExpectedMessageCount(0);
+ // mock:result comes from loadConfigAdminConfigurationFile()
+ getMockEndpoint("mock:result").setExpectedMessageCount(0);
+ // mock:extra comes from useOverridePropertiesWithConfigAdmin()
getMockEndpoint("mock:extra").expectedBodiesReceived("Bye World", "Yay Bye WorldYay Bye World");
template.sendBody("direct:start", "World");
Modified: websites/production/camel/content/siteindex.html
==============================================================================
--- websites/production/camel/content/siteindex.html (original)
+++ websites/production/camel/content/siteindex.html Thu Dec 17 10:27:31 2015
@@ -91,7 +91,7 @@
<p>
<table class="grid" width="99%" cellspacing="0"><tr><td colspan="2" rowspan="1">
- <table width="100%"><tr><td colspan="1" rowspan="1"><a shape="rect" href="#index-0-9">0-9</a> ... 0</td><td colspan="1" rowspan="1"><a shape="rect" href="#index-A">A</a> ... 35</td><td colspan="1" rowspan="1"><a shape="rect" href="#index-B">B</a> ... 42</td><td colspan="1" rowspan="1"><a shape="rect" href="#index-C">C</a> ... 179</td><td colspan="1" rowspan="1"><a shape="rect" href="#index-D">D</a> ... 33</td><td colspan="1" rowspan="1"><a shape="rect" href="#index-E">E</a> ... 31</td></tr><tr><td colspan="1" rowspan="1"><a shape="rect" href="#index-F">F</a> ... 14</td><td colspan="1" rowspan="1"><a shape="rect" href="#index-G">G</a> ... 33</td><td colspan="1" rowspan="1"><a shape="rect" href="#index-H">H</a> ... 85</td><td colspan="1" rowspan="1"><a shape="rect" href="#index-I">I</a> ... 17</td><td colspan="1" rowspan="1"><a shape="rect" href="#index-J">J</a> ... 31</td><td colspan="1" rowspan="1"><a shape="rect" href="#index-K">K</a> ... 6</td></tr><tr><td colspan="1" row
span="1"><a shape="rect" href="#index-L">L</a> ... 18</td><td colspan="1" rowspan="1"><a shape="rect" href="#index-M">M</a> ... 34</td><td colspan="1" rowspan="1"><a shape="rect" href="#index-N">N</a> ... 11</td><td colspan="1" rowspan="1"><a shape="rect" href="#index-O">O</a> ... 7</td><td colspan="1" rowspan="1"><a shape="rect" href="#index-P">P</a> ... 28</td><td colspan="1" rowspan="1"><a shape="rect" href="#index-Q">Q</a> ... 5</td></tr><tr><td colspan="1" rowspan="1"><a shape="rect" href="#index-R">R</a> ... 32</td><td colspan="1" rowspan="1"><a shape="rect" href="#index-S">S</a> ... 87</td><td colspan="1" rowspan="1"><a shape="rect" href="#index-T">T</a> ... 42</td><td colspan="1" rowspan="1"><a shape="rect" href="#index-U">U</a> ... 19</td><td colspan="1" rowspan="1"><a shape="rect" href="#index-V">V</a> ... 8</td><td colspan="1" rowspan="1"><a shape="rect" href="#index-W">W</a> ... 30</td></tr><tr><td colspan="1" rowspan="1"><a shape="rect" href="#index-X">X</a> ... 14</td>
<td colspan="1" rowspan="1"><a shape="rect" href="#index-Y">Y</a> ... 1</td><td colspan="1" rowspan="1"><a shape="rect" href="#index-Z">Z</a> ... 4</td><td colspan="1" rowspan="1"><a shape="rect" href="#index-%21@%23%24">!@#$</a> ... 0</td><td colspan="1" rowspan="1"> </td><td colspan="1" rowspan="1"> </td></tr></table>
+ <table width="100%"><tr><td colspan="1" rowspan="1"><a shape="rect" href="#index-0-9">0-9</a> ... 0</td><td colspan="1" rowspan="1"><a shape="rect" href="#index-A">A</a> ... 36</td><td colspan="1" rowspan="1"><a shape="rect" href="#index-B">B</a> ... 42</td><td colspan="1" rowspan="1"><a shape="rect" href="#index-C">C</a> ... 179</td><td colspan="1" rowspan="1"><a shape="rect" href="#index-D">D</a> ... 33</td><td colspan="1" rowspan="1"><a shape="rect" href="#index-E">E</a> ... 31</td></tr><tr><td colspan="1" rowspan="1"><a shape="rect" href="#index-F">F</a> ... 14</td><td colspan="1" rowspan="1"><a shape="rect" href="#index-G">G</a> ... 33</td><td colspan="1" rowspan="1"><a shape="rect" href="#index-H">H</a> ... 85</td><td colspan="1" rowspan="1"><a shape="rect" href="#index-I">I</a> ... 17</td><td colspan="1" rowspan="1"><a shape="rect" href="#index-J">J</a> ... 31</td><td colspan="1" rowspan="1"><a shape="rect" href="#index-K">K</a> ... 6</td></tr><tr><td colspan="1" row
span="1"><a shape="rect" href="#index-L">L</a> ... 18</td><td colspan="1" rowspan="1"><a shape="rect" href="#index-M">M</a> ... 34</td><td colspan="1" rowspan="1"><a shape="rect" href="#index-N">N</a> ... 11</td><td colspan="1" rowspan="1"><a shape="rect" href="#index-O">O</a> ... 7</td><td colspan="1" rowspan="1"><a shape="rect" href="#index-P">P</a> ... 28</td><td colspan="1" rowspan="1"><a shape="rect" href="#index-Q">Q</a> ... 5</td></tr><tr><td colspan="1" rowspan="1"><a shape="rect" href="#index-R">R</a> ... 32</td><td colspan="1" rowspan="1"><a shape="rect" href="#index-S">S</a> ... 87</td><td colspan="1" rowspan="1"><a shape="rect" href="#index-T">T</a> ... 42</td><td colspan="1" rowspan="1"><a shape="rect" href="#index-U">U</a> ... 19</td><td colspan="1" rowspan="1"><a shape="rect" href="#index-V">V</a> ... 8</td><td colspan="1" rowspan="1"><a shape="rect" href="#index-W">W</a> ... 30</td></tr><tr><td colspan="1" rowspan="1"><a shape="rect" href="#index-X">X</a> ... 14</td>
<td colspan="1" rowspan="1"><a shape="rect" href="#index-Y">Y</a> ... 1</td><td colspan="1" rowspan="1"><a shape="rect" href="#index-Z">Z</a> ... 4</td><td colspan="1" rowspan="1"><a shape="rect" href="#index-%21@%23%24">!@#$</a> ... 0</td><td colspan="1" rowspan="1"> </td><td colspan="1" rowspan="1"> </td></tr></table>
</td></tr><tr valign="top"><td colspan="1" rowspan="1"><h4 style="margin-top: 0px"><a shape="rect" name="index-0-9"></a>0-9</h4>
</td><td colspan="1" rowspan="1"><h4 style="margin-top: 0px"><a shape="rect" name="index-A"></a>A</h4>
<span class="icon aui-icon aui-icon-small aui-iconfont-page-default" title="Page">Page:</span> <a shape="rect" href="acknowledgment.html">Acknowledgment</a>
@@ -129,13 +129,16 @@
<div class="smalltext" style="margin: 0 0 0 36px">Async Http Client (AHC) Websocket Client Component Available as of Camel 2.14 The ahc-ws component provides Websocket based endpoints for a client communicating with external servers over Websocket (as a client opening a websocket connection to an externa</div>
<span class="icon aui-icon aui-icon-small aui-iconfont-page-default" title="Page">Page:</span> <a shape="rect" href="amqp.html">AMQP</a>
<br clear="none">
- <div class="smalltext" style="margin: 0 0 0 36px">AMQP Available as of Camel X.X The amqp: component supports the AMQP protocol http://www.amqp.org/ using the JMS Client API of the Qpid http://qpid.apache.org/ project. In case you want to use AMQP with RabbitMQ you might also be interested in the Camel R</div>
+ <div class="smalltext" style="margin: 0 0 0 36px">AMQP The amqp: component supports the AMQP 1.0 protocol http://www.amqp.org/ using the JMS Client API of the Qpid http://qpid.apache.org/ project. In case you want to use AMQP 0.9 (in particular RabbitMQ) you might also be interested in the Camel RabbitMQ</div>
<span class="icon aui-icon aui-icon-small aui-iconfont-page-default" title="Page">Page:</span> <a shape="rect" href="annotation-based-expression-language.html">Annotation Based Expression Language</a>
<br clear="none">
<div class="smalltext" style="margin: 0 0 0 36px">Annotation Based Expression Language You can also use any of the Languages supported in Camel to bind expressions to method parameters when using Bean Integration. For example you can use any of these annotations: Annotation Description @Bean http://camel</div>
<span class="icon aui-icon aui-icon-small aui-iconfont-page-default" title="Page">Page:</span> <a shape="rect" href="aop.html">AOP</a>
<br clear="none">
<div class="smalltext" style="margin: 0 0 0 36px">AOP Available as of Camel 2.0 The AOP has been marked as @deprecated in Camel 2.4 and will be removed in a future release. The concept of the AOP did not go in the directions we liked, so we decided it's better to remove unused/less used features. Camel h</div>
+ <span class="icon aui-icon aui-icon-small aui-iconfont-page-default" title="Page">Page:</span> <a shape="rect" href="apache-spark.html">Apache Spark</a>
+ <br clear="none">
+ <div class="smalltext" style="margin: 0 0 0 36px">Apache Spark component Apache Spark component is available starting from Camel 2.17. This documentation page covers the Apache Spark http://spark.apache.org/ component for the Apache Camel. The main purpose of the Spark integration with Camel is to pro</div>
<span class="icon aui-icon aui-icon-small aui-iconfont-page-default" title="Page">Page:</span> <a shape="rect" href="apns.html">APNS</a>
<br clear="none">
<div class="smalltext" style="margin: 0 0 0 36px">Apns Component Available as of Camel 2.8 The apns component is used for sending notifications to iOS devices. The apns components use javapns https://github.com/notnoop/java-apns library. The component supports sending notifications to Apple Push Notifica</div>
@@ -2085,7 +2088,7 @@
<div class="smalltext" style="margin: 0 0 0 36px">Security Camel offers several forms & levels of security capabilities that can be utilized on camel routes. These various forms of security may be used in conjunction with each other or separately. The broad categories offered are Route Security - Authent</div>
<span class="icon aui-icon aui-icon-small aui-iconfont-page-default" title="Page">Page:</span> <a shape="rect" href="security-advisories.html">Security Advisories</a>
<br clear="none">
- <div class="smalltext" style="margin: 0 0 0 36px">2015 CVE-2015-0264 - The XPath handling in Apache Camel for invalid XML Strings or invalid XML GenericFile objects allows remote attackers to read arbitrary files via an XML External Entity (XXE) declaration. The XML External Entity (XXE) will be resolved</div>
+ <div class="smalltext" style="margin: 0 0 0 36px">2015 CVE-2015-5348 - Apache Camel's Jetty/Servlet usage is vulnerable to Java object de-serialisation vulnerability. CVE-2015-0264 - The XPath handling in Apache Camel for invalid XML Strings or invalid XML GenericFile objects allows remote attackers to r</div>
<span class="icon aui-icon aui-icon-small aui-iconfont-page-default" title="Page">Page:</span> <a shape="rect" href="seda.html">SEDA</a>
<br clear="none">
<div class="smalltext" style="margin: 0 0 0 36px">SEDA Component The seda: component provides asynchronous SEDA http://www.eecs.harvard.edu/~mdw/proj/seda/ behavior, so that messages are exchanged on a BlockingQueue http://java.sun.com/j2se/1.5.0/docs/api/java/util/concurrent/BlockingQueue.html and consu</div>