Just as a follow up - POI 3.17-beta1 didn't have the patch in, therefore the test project also failed. The error with the signature value is based on problem with implicit toString() calls, i.e. Date.toString(). Although we already have those in our forbidden apis list, this is futile because when Strings are concatenated StringBuilder.append() will be called and the toString() call happens inside the jvm classes.
I'm now adding a check for StringBuilder.append(Object) which catches quite a few of those cases ... On 6/29/17 12:37 AM, Andreas Beeker wrote: > I'm trying to reproduce it by setting a different Locale, but I can't break > it yet ... > When I'm using a test project to sign a .xlsx with POI 3.17-beta1, Libre > Office doesn't like its signature. > > It I can't find a solution, I'll probably just comment out that line ... :( > > On 6/29/17 12:25 AM, pj.fanning wrote: >> I see a similar test issue when I build on my laptop >> >> >> >
signature.asc
Description: OpenPGP digital signature
