Andrea Cosentino created CAMEL-24298:
----------------------------------------

             Summary: Add an optional component/scheme allow-list to 
dynamic-URI EIPs (toD, recipientList, routingSlip, dynamicRouter, enrich, 
pollEnrich)
                 Key: CAMEL-24298
                 URL: https://issues.apache.org/jira/browse/CAMEL-24298
             Project: Camel
          Issue Type: Improvement
          Components: camel-core
            Reporter: Andrea Cosentino
            Assignee: Andrea Cosentino


The dynamic-URI EIPs compute their recipient endpoint URI from a route-author 
expression at runtime. There is currently no option to restrict which component 
schemes a dynamic recipient may resolve to. Suggested: add an optional 
allowedSchemes (component allow-list) attribute on ToDynamicDefinition and the 
sibling definitions (RecipientList, RoutingSlip, DynamicRouter, Enrich, 
PollEnrich), so low-code / Kamelet deployments can restrict e.g. 
.toD("${header.dest}") to a fixed set of components. Defence-in-depth 
enhancement; default unrestricted (no behavioural change).

_Filed by Claude Code on behalf of Andrea Cosentino._



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to