The GitHub Actions job "Java CI with Ant" on poi.git/dsig-rels-line-breaks has succeeded. Run started by GitHub user naruto-lgtm (triggered by pjfanning).
Head commit for run: 99c3dff03b46e453cfb458b335fff8d85e875c16 / Nayyar <[email protected]> don't strip line breaks from signed .rels parts OOXMLURIDereferencer removed every CR and LF byte from .rels parts before the relationship transform digested them, while the package reads a line break inside an attribute value as a space. A line feed appended to a signed relationship's Target therefore left the digest unchanged but made the package resolve another part, e.g. /word/document.xml%20, with the signature still valid. The relationship transform already drops the whitespace between relationships, which the workaround was for, so pass .rels parts unchanged. Report URL: https://github.com/apache/poi/actions/runs/40566363814 With regards, GitHub Actions via GitBox --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
