https://bz.apache.org/bugzilla/show_bug.cgi?id=68336

--- Comment #3 from PJ Fanning <fannin...@yahoo.com> ---
Please read https://poi.apache.org/security.html

POI is 20 years old. It would need a total rewrite to get it to to throw
checked exceptions for every issue. This is not going to happen.

It is up to users to use POI in a safe way. You should strongly consider using
a Sandboxed environment if you intend to use POI to read potentially malicious
files.

If you want to provide patches to help harden the POI code - great.

If you are just going to dump artificially created corrupt files then I have no
interest. You are not helping anyone.

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@poi.apache.org
For additional commands, e-mail: dev-h...@poi.apache.org

Reply via email to