CAMEL-9309: Make it easier to turn on|off java transport over http

apache · Nov 12, 2015 · 32eacda · 32eacda
1 parent a68434c
commit 32eacda
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 0 deletions.
diff --git a/...etty-http/src/main/java/org/apache/camel/component/netty/http/NettyHttpConfiguration.java b/...etty-http/src/main/java/org/apache/camel/component/netty/http/NettyHttpConfiguration.java
@@ -132,6 +132,9 @@ public boolean isTransferException() {
      * in the response as a application/x-java-serialized-object content type.
      * On the producer side the exception will be deserialized and thrown as is, instead of the HttpOperationFailedException.
      * The caused exception is required to be serialized.
+     * <p/>
+     * This is by default turned off. If you enable this then be aware that Java will deserialize the incoming
+     * data from the request to Java and that can be a potential security risk.
      */
     public void setTransferException(boolean transferException) {
         this.transferException = transferException;

diff --git a/...ty4-http/src/main/java/org/apache/camel/component/netty4/http/NettyHttpConfiguration.java b/...ty4-http/src/main/java/org/apache/camel/component/netty4/http/NettyHttpConfiguration.java
@@ -131,6 +131,9 @@ public boolean isTransferException() {
      * in the response as a application/x-java-serialized-object content type.
      * On the producer side the exception will be deserialized and thrown as is, instead of the HttpOperationFailedException.
      * The caused exception is required to be serialized.
+     * <p/>
+     * This is by default turned off. If you enable this then be aware that Java will deserialize the incoming
+     * data from the request to Java and that can be a potential security risk.
      */
     public void setTransferException(boolean transferException) {
         this.transferException = transferException;