poi-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Allison, Timothy B." <talli...@mitre.org>
Subject RE: reasonable threshold for ZipSecureFile?
Date Thu, 23 Jul 2015 19:02:20 GMT
Might make sense.  We might want to set a bar on length before calculating the %inflation.
 Whether that's the absolute length as in Tika or another threshold...2000 bytes expanded
out of 10 wouldn't be a bomb...the bomb happens after you hit a certain length where a bomb
could actually cause problems.  

Thank you, again!

Best,

          TIm

-----Original Message-----
From: Andreas Beeker [mailto:kiwiwings@apache.org] 
Sent: Thursday, July 23, 2015 1:31 PM
To: POI Users List <user@poi.apache.org>
Subject: Re: reasonable threshold for ZipSecureFile?

> Just to confirm absolutely, ZipSecureFile is only used on ooxml files, right?

It's activated over the ZipHelper which itself is only used in ooxml context.

I wonder, if we should change the default value, as you having problems with normal files?
(given that my assumptions about AND/OR are correct ...)

Andi.


---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@poi.apache.org
For additional commands, e-mail: user-help@poi.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@poi.apache.org
For additional commands, e-mail: user-help@poi.apache.org


Mime
View raw message