https://bz.apache.org/bugzilla/show_bug.cgi?id=59933
--- Comment #4 from Andreas <a.nieme...@euroimmun.de> --- I tried a bit more debugging and think I found it. Inspecting the NullLogger object, which is returned in the DocumentHelper private static POILogger logger = POILogFactory.getLogger(DocumentHelper.class); there is a missing @Override annotation for the method public void log(int level, Object obj1, final Throwable exception): /** * Log a message * * @param level One of DEBUG, INFO, WARN, ERROR, FATAL * @param obj1 The object to log. */ @Override public void log(final int level, final Object obj1) { // do nothing } /** * Log a message * * @param level One of DEBUG, INFO, WARN, ERROR, FATAL * @param obj1 The object to log. This is converted to a string. * @param exception An exception to be logged */ public void log(int level, Object obj1, final Throwable exception) { // do nothing } For probably that reason, the abstract method from the POILogger is called and the exception reflecting it: Caused by: java.lang.IllegalAccessError: tried to access method org.apache.poi.util.POILogger.log(ILjava/lang/Object;Ljava/lang/Throwable;)V from class org.apache.poi.util.DocumentHelper at org.apache.poi.util.DocumentHelper.trySetXercesSecurityManager(DocumentHelper.java:84) at org.apache.poi.util.DocumentHelper.<clinit>(DocumentHelper.java:57) Try using it with a call before the return should prove it (where t can be null for testing purpose): logger.log(POILogger.WARN, "SAX Security Manager - test logger", t); BTW the older 3.12 version of the NullLogger class has the annotation above the method. Can you confirm? Kind regards, Andreas -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@poi.apache.org For additional commands, e-mail: dev-h...@poi.apache.org