[
https://issues.apache.org/jira/browse/CAMEL-24298?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Andrea Cosentino resolved CAMEL-24298.
--------------------------------------
Resolution: Fixed
Fixed on main via PR https://github.com/apache/camel/pull/25315 —
toD/dynamic-router now supports an optional allowedSchemes allow-list; a
disallowed scheme is rejected independently of ignoreInvalidEndpoint. Main-only
(4.22.0).
_Claude Code on behalf of Andrea Cosentino (@oscerd)._
> Add an optional component/scheme allow-list to dynamic-URI EIPs (toD,
> recipientList, routingSlip, dynamicRouter, enrich, pollEnrich)
> ------------------------------------------------------------------------------------------------------------------------------------
>
> Key: CAMEL-24298
> URL: https://issues.apache.org/jira/browse/CAMEL-24298
> Project: Camel
> Issue Type: Improvement
> Components: camel-core
> Reporter: Andrea Cosentino
> Assignee: Andrea Cosentino
> Priority: Minor
> Fix For: 4.22.0
>
>
> The dynamic-URI EIPs compute their recipient endpoint URI from a route-author
> expression at runtime. There is currently no option to restrict which
> component schemes a dynamic recipient may resolve to. Suggested: add an
> optional allowedSchemes (component allow-list) attribute on
> ToDynamicDefinition and the sibling definitions (RecipientList, RoutingSlip,
> DynamicRouter, Enrich, PollEnrich), so low-code / Kamelet deployments can
> restrict e.g. .toD("${header.dest}") to a fixed set of components.
> Defence-in-depth enhancement; default unrestricted (no behavioural change).
> _Filed by Claude Code on behalf of Andrea Cosentino._
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
