Skip to content

[backport camel-4.18.x] CAMEL-23588: camel-undertow - filter the legacy websocket.* exchange-header prefix#23992

Merged
oscerd merged 1 commit into
apache:camel-4.18.xfrom
oscerd:backport-CAMEL-23588-camel-4.18.x
Jun 12, 2026
Merged

[backport camel-4.18.x] CAMEL-23588: camel-undertow - filter the legacy websocket.* exchange-header prefix#23992
oscerd merged 1 commit into
apache:camel-4.18.xfrom
oscerd:backport-CAMEL-23588-camel-4.18.x

Conversation

@oscerd

@oscerd oscerd commented Jun 12, 2026

Copy link
Copy Markdown
Contributor

Backport to camel-4.18.x of CAMEL-23588 (main commit d5a717dd0f8).

What

UndertowHeaderFilterStrategy now also filters the legacy websocket.* Exchange-header prefix (in addition to the Camel* / camel* / org.apache.camel.* prefixes it already filtered), in both the inbound (wire -> exchange) and outbound (exchange -> wire) directions. This follows the dedicated-filter-strategy shape used by CAMEL-23532 for camel-vertx-websocket / camel-atmosphere-websocket / camel-iggy, which were already backported to this branch.

The UndertowConstants string values are unchanged (they are part of the component's externally-visible API contract), so routes referencing them within an undertow route continue to work unchanged. As documented, the HeaderFilterStrategy governs only the transport boundary and is defence-in-depth; route authors handling untrusted inbound traffic should still strip websocket.* headers explicitly.

Changes

  • UndertowHeaderFilterStrategy: add websocket. to the in/out filter prefixes (identical to main).
  • camel-4x-upgrade-guide-4_18.adoc: add the camel-undertow "potential breaking change" entry, grouped with the existing websocket family.

The matching entry will be synced to the 4_18 upgrade guide on main in a separate doc-sync PR, per the upgrade-guide policy.


Claude Code on behalf of Andrea Cosentino

…filter the legacy websocket.* exchange-header prefix

Backport to camel-4.18.x of the main-branch change (d5a717d). Adds the
legacy websocket.* prefix to the undertow HeaderFilterStrategy in/out filters
(in addition to Camel* / camel* / org.apache.camel.*) and documents it in the
4.18 upgrade guide, alongside the CAMEL-23532 vertx-websocket / atmosphere-websocket
/ iggy family.
@oscerd oscerd requested review from Croway and gnodet June 12, 2026 13:16
@oscerd oscerd merged commit f184cd8 into apache:camel-4.18.x Jun 12, 2026
3 checks passed
@oscerd oscerd deleted the backport-CAMEL-23588-camel-4.18.x branch June 12, 2026 17:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants