Chapril/date.chapril.org-framadate
Chapril/date.chapril.org-framadate
24
1
Fork 0
Code Issues Pull Requests Releases Activity

Merge branch 'iss220' into 'master'

Browse Source 
Sanitize names to avoid Formula Injections on CSV export (fix issue #220)

See merge request !171
This commit is contained in:
JosephK 2017-02-20 06:59:36 +01:00
commit adcea7d04b
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
app/classes/Framadate/Utils.php
View File

@ -179,6 +179,7 @@ class Utils {
$escaped = str_replace('"', '""', $text); $escaped = str_replace('"', '""', $text);
$escaped = str_replace("\r\n", '', $escaped); $escaped = str_replace("\r\n", '', $escaped);
$escaped = str_replace("\n", '', $escaped); $escaped = str_replace("\n", '', $escaped);
$escaped = preg_replace("/^(=|\+|\-|\@)/", "'$1", $escaped);
return '"' . $escaped . '"'; return '"' . $escaped . '"';
} }