Merge pull request #2674 from nextcloud/fix/quote-cell-values

Chartman123 · web-flow · commit 6c8a6985ee48 · 2025-04-03T08:20:57.000+02:00
fix: quote cell values to prevent formula evaluation
diff --git a/lib/Service/SubmissionService.php b/lib/Service/SubmissionService.php
@@ -312,6 +312,11 @@ private function exportData(array $header, array $data, string $fileFormat, ?Fil
 						->setWrapText(true);
 				} else {
 					$activeWorksheet->setCellValue([$column, $row], $value);
+
+					// Quote cell values that start with '=' to prevent evaluation of formulas
+					if (is_string($value) && str_starts_with($value, '=')) {
+						$activeWorksheet->getCell([$column, $row])->getStyle()->setQuotePrefix(true);
+					}
 				}
 			}
 		}

Original file line number	Diff line number	Diff line change
`@@ -312,6 +312,11 @@ private function exportData(array $header, array $data, string $fileFormat, ?Fil`
`312`	`312`	`->setWrapText(true);`
`313`	`313`	`} else {`
`314`	`314`	`$activeWorksheet->setCellValue([$column, $row], $value);`
	`315`	`+`
	`316`	`+ // Quote cell values that start with '=' to prevent evaluation of formulas`
	`317`	`+ if (is_string($value) && str_starts_with($value, '=')) {`
	`318`	`+ $activeWorksheet->getCell([$column, $row])->getStyle()->setQuotePrefix(true);`
	`319`	`+ }`
`315`	`320`	`}`
`316`	`321`	`}`
`317`	`322`	`}`