https://bz.apache.org/bugzilla/show_bug.cgi?id=63188

Sushmita Nag <s...@opentext.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEEDINFO                    |NEW

--- Comment #5 from Sushmita Nag <s...@opentext.com> ---
hi Dominik Stadler,

As per your suggestion, the fix which you suggested[setting minm inflate ratio
explicitly] worked and we are able to import/manipulate the .xlsx successfully
using poi-3.15.

However, as per poi, the file is used to inflate memory usage and thus could
pose a security risk. 

So, explicitly disabling the validation & setting minimum inflate ratio to 0.0
- Will it expose any security risk from server safety perspective ? because
then there are chances where certain files can blow up the server due to
excessive memory usage. So, we are concerned about this factor.

Could you please suggest us on the same ?


Regards,
Sushmita

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@poi.apache.org
For additional commands, e-mail: dev-h...@poi.apache.org

Reply via email to