Skip to content
Draft
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
Expand Up @@ -30,6 +30,19 @@ resolves back inside the polled directory remains accepted. Two configurations c
server that reports names navigating above the polled directory, and a `fileName` expression (used when
`useList=false`) that navigates above it. Set `jailStartingDirectory=false` if such a path is intended.

=== camel-azure-storage-blob and camel-azure-storage-datalake

Local downloads configured with `fileDir` now resolve existing filesystem path segments before checking
that the destination remains inside the configured directory. Downloads through a symbolic link that
resolves outside `fileDir` are rejected. Valid nested download paths continue to work.

=== camel-google-storage

Local downloads configured with a plain `downloadFileName` directory now resolve existing filesystem
path segments before checking that the destination remains inside that directory. Downloads through a
symbolic link that resolves outside the configured directory are rejected. Valid object names using `/`
as a pseudo-directory separator continue to work.

=== camel-spring-redis - the default serializer applies a deserialization filter

The default serializer, `JdkSerializationRedisSerializer`, now installs a
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -42,6 +42,19 @@ resolves back inside the polled directory remains accepted. Two configurations c
server that reports names navigating above the polled directory, and a `fileName` expression (used when
`useList=false`) that navigates above it. Set `jailStartingDirectory=false` if such a path is intended.

=== camel-azure-storage-blob and camel-azure-storage-datalake

Local downloads configured with `fileDir` now resolve existing filesystem path segments before checking
that the destination remains inside the configured directory. Downloads through a symbolic link that
resolves outside `fileDir` are rejected. Valid nested download paths continue to work.

=== camel-google-storage

Local downloads configured with a plain `downloadFileName` directory now resolve existing filesystem
path segments before checking that the destination remains inside that directory. Downloads through a
symbolic link that resolves outside the configured directory are rejected. Valid object names using `/`
as a pseudo-directory separator continue to work.

=== camel-spring-redis - the default serializer applies a deserialization filter

The default serializer, `JdkSerializationRedisSerializer`, now installs a JEP-290
Expand Down