[jira] [Reopened] (CAMEL-7067) JcrProducer should not store all exchange properties in the target JCR node

["Gregor Zurowski (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/CAMEL-7067?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Gregor Zurowski reopened CAMEL-7067:
------------------------------------


Reopened as I need to update the component's documentation (http://camel.apache.org/jcr.html).

> JcrProducer should not store all exchange properties in the target JCR node
> ---------------------------------------------------------------------------
>
>                 Key: CAMEL-7067
>                 URL: https://issues.apache.org/jira/browse/CAMEL-7067
>             Project: Camel
>          Issue Type: Improvement
>          Components: camel-jcr
>    Affects Versions: 2.12.2
>            Reporter: Gregor Zurowski
>            Assignee: Claus Ibsen
>             Fix For: 2.12.3, 2.13.0
>
>         Attachments: CAMEL-7067-headers.patch, CAMEL-7067.patch
>
>
> The CamelJcrInsert operation in JcrProducer stores all exchange properties in the target JCR node including all Camel properties that are found in the incoming exchange. This means that non-relevant data is persisted in JCR nodes including sensitive information such as username and password that is part of the URI in the CamelToEndpoint exchange property. Other examples of such properties include CamelJcrNodeName and CamelExternalRedelivered.



--
This message was sent by Atlassian JIRA
(v6.1.5#6160)