kenmirrors/firefly-iii
1
0
Fork 0
mirror of https://github.com/firefly-iii/firefly-iii.git synced 2026-07-03 04:54:10 -07:00
Code Issues Projects Releases Wiki Activity

Several reports of a possible unescaped data situation, thanks all.

Browse Source
This commit is contained in:
James Cole
2026-07-03 06:26:38 +02:00
parent 6fb8ef925d
commit bea334f159
1 changed files with 19 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
app/Support/Export/ExportDataGenerator.php
+19
View File
@@ -60,6 +60,7 @@ use FireflyIII\User;
use Illuminate\Support\Collection;
use Illuminate\Support\Facades\Log;
use League\Csv\CannotInsertRecord;
use League\Csv\EscapeFormula;
use League\Csv\Exception;
use League\Csv\Writer;
use Psr\Container\ContainerExceptionInterface;
@@ -285,6 +286,8 @@ class ExportDataGenerator
// load the CSV document from a string
$csv = Writer::fromString();
$escaper = new EscapeFormula();
$csv->addFormatter($escaper->escapeRecord(...));
// insert the header
try {
@@ -354,6 +357,8 @@ class ExportDataGenerator
// load the CSV document from a string
$csv = Writer::fromString();
$escaper = new EscapeFormula();
$csv->addFormatter($escaper->escapeRecord(...));
// insert the header
try {
@@ -413,6 +418,8 @@ class ExportDataGenerator
// load the CSV document from a string
$csv = Writer::fromString();
$escaper = new EscapeFormula();
$csv->addFormatter($escaper->escapeRecord(...));
// insert the header
try {
@@ -458,6 +465,8 @@ class ExportDataGenerator
// load the CSV document from a string
$csv = Writer::fromString();
$escaper = new EscapeFormula();
$csv->addFormatter($escaper->escapeRecord(...));
// insert the header
try {
@@ -538,6 +547,8 @@ class ExportDataGenerator
// load the CSV document from a string
$csv = Writer::fromString();
$escaper = new EscapeFormula();
$csv->addFormatter($escaper->escapeRecord(...));
// insert the header
try {
@@ -705,6 +716,8 @@ class ExportDataGenerator
}
// load the CSV document from a string
$csv = Writer::fromString();
$escaper = new EscapeFormula();
$csv->addFormatter($escaper->escapeRecord(...));
// insert the header
try {
@@ -852,6 +865,8 @@ class ExportDataGenerator
// load the CSV document from a string
$csv = Writer::fromString();
$escaper = new EscapeFormula();
$csv->addFormatter($escaper->escapeRecord(...));
// insert the header
try {
@@ -908,6 +923,8 @@ class ExportDataGenerator
// load the CSV document from a string
$csv = Writer::fromString();
$escaper = new EscapeFormula();
$csv->addFormatter($escaper->escapeRecord(...));
// insert the header
try {
@@ -1104,6 +1121,8 @@ class ExportDataGenerator
// load the CSV document from a string
$csv = Writer::fromString();
$escaper = new EscapeFormula();
$csv->addFormatter($escaper->escapeRecord(...));
// insert the header
try {