使用apache poi解析Excel加水印时报错Zip Bomb

原创

已于 2024-10-15 10:02:48 修改 · 1.3k 阅读

7 ·

CC 4.0 BY-SA版权

文章标签：

#apache #excel

于 2024-04-30 11:20:08 首次发布

问题描述：

使用apache poi包对存在的excel文件添加水印操作，当excel数据量小的时候没啥问题，数据量大了就会报错Zip Bomb，具体报错如下：

java.io.IOException: Zip bomb detected! 
The file would exceed the max. ratio of compressed file size to the size of the expanded data. 
This may indicate that the file is used to inflate memory usage and thus could pose a security risk.
You can adjust this limit via ZipSecureFile.setMinInflateRatio() if you need to work with files which exceed this limit. 
Uncompressed size: 105682, Raw/compressed size: 651, ratio: 0.006160 
Limits: MIN_INFLATE_RATIO: 0.010000, Entry: xl/styles.xml 
org.apache.poi.openxml4j.util.ZipArchiveThresholdInputStream.checkThreshold(ZipArchiveThresholdInputStream.java:132)
org.apache.poi.openxml4j.util.ZipArchiveThresholdInputStream.read(ZipArchiveThresholdInputStream.java:82)
org.apache.poi.util.IOUtils.toByteArray(IOUtils.java:182)
org.apache.poi.util.IOUtils.toByteArray(IOUtils.java:149)
org.apache.poi.util.IOUtils.toByteArray(IOUtils.java:136) org.