Fix unregistered and hijacked external links in documentation - #25717
Merged
Conversation
The link pointed to citfrusframework.org (a typo of citrusframework.org) which is an unregistered domain and therefore claimable by anyone. Assisted-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_015JZf5SuQcZsKEyX9MRWMbh
Contributor
|
🌟 Thank you for your contribution to the Apache Camel project! 🌟 🐫 Apache Camel Committers, please review the following items:
|
apupier
approved these changes
Aug 25, 2026
The snakeyaml.org domain lapsed and was re-registered on 2025-01-01 by an unrelated third party that now serves an SEO content site trading on the SnakeYAML name. Point the documentation and Javadoc at the project's real home on Bitbucket instead. Assisted-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_015JZf5SuQcZsKEyX9MRWMbh
oscerd
approved these changes
Aug 25, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What
Fixes two external documentation links that point at domains not controlled by the projects they claim to reference:
Citrus link typo —
docs/user-manual/modules/ROOT/pages/testing.adoclinked tocitfrusframework.orginstead ofcitrusframework.org. The misspelled domain is unregistered (verified via RDAP on 2026-08-25), so anyone could register it and serve arbitrary content to readers — and to AI agents that consume the generatedhttps://camel.apache.org/manual/testing.md/ llms.txt files — under the authority of the Camel documentation. Introduced in 67a4e62 (chore(docs): Improve integration testing documentation #18883); reported to security@apache.org by an external researcher and triaged as a documentation fix rather than a vulnerability.Hijacked snakeyaml.org — the SnakeYAML docs and Javadoc linked to
www.snakeyaml.org, but that domain lapsed and was re-registered on 2025-01-01 by an unrelated third party that now serves an SEO content site trading on the SnakeYAML name. The links now point to the project's real home athttps://bitbucket.org/snakeyaml/snakeyaml. The catalog copy of the doc page (a verbatim sync of the source.adoc) was updated to match.Verification sweep
All ~400 external domains referenced across the documentation tree were checked for: look-alike misspellings (edit-distance comparison), unregistered domains (DNS + RDAP), nameservers pointing at domain-parking services, RDAP re-registration dates newer than the doc references, and "for sale" landing pages. No other compromised or claimable real-project domain was found. Notes for potential follow-ups (not security-relevant, so left out of this PR):
kaotoio.github.io/kaoto/ingetting-started.adocis a dead GitHub Pages link (the KaotoIO org still exists, so it is not takeover-able), andrandom-data-api.com(used in JBang examples) no longer serves DNS but remains registered until 2027.This PR was created by Claude Code on behalf of ppkarwasz.
🤖 Generated with Claude Code
https://claude.ai/code/session_015JZf5SuQcZsKEyX9MRWMbh