jmestwa-coder commented on code in PR #1071:
URL: https://github.com/apache/poi/pull/1071#discussion_r3250362648
##########
poi-scratchpad/src/main/java/org/apache/poi/hmef/CompressedRTF.java:
##########
@@ -52,6 +54,16 @@ public final class CompressedRTF extends LZWDecompresser {
"\\fmodern \\fscript \\fdecor MS Sans SerifSymbolArialTimes New
RomanCourier" +
"{\\colortbl\\red0\\green0\\blue0\n\r\\par
\\pard\\plain\\f0\\fs20\\b\\i\\u\\tab\\tx";
+ private static final int DEFAULT_MAX_RECORD_LENGTH = 50_000_000;
Review Comment:
I mainly wanted a limit that was large enough to avoid rejecting legitimate
larger RTF payloads, while still enforcing a reasonable upper bound for
malformed or inconsistent size declarations.
The 50MB value was meant as a conservative default rather than a
format-defined maximum. Happy to align it with an existing POI-wide limit
pattern, or reduce/remove the configurable default if you’d prefer.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
