fix: quote cell values to prevent formula evaluation

Chartman123 · Chartman123 · commit c745e16a0bd1 · 2025-04-03T00:37:31.000+02:00
Signed-off-by: Christian Hartmann &lt;chris-hartmann@gmx.de&gt;
diff --git a/lib/Service/SubmissionService.php b/lib/Service/SubmissionService.php
@@ -312,6 +312,11 @@ private function exportData(array $header, array $data, string $fileFormat, ?Fil
 						->setWrapText(true);
 				} else {
 					$activeWorksheet->setCellValue([$column, $row], $value);
+
+					// Quote cell values that start with '=' to prevent evaluation of formulas
+					if (is_string($value) && str_starts_with($value, '=')) {
+						$activeWorksheet->getCell([$column, $row])->getStyle()->setQuotePrefix(true);
+					}
 				}
 			}
 		}

Original file line number	Diff line number	Diff line change
`@@ -312,6 +312,11 @@ private function exportData(array $header, array $data, string $fileFormat, ?Fil`
`312`	`312`	`->setWrapText(true);`
`313`	`313`	`} else {`
`314`	`314`	`$activeWorksheet->setCellValue([$column, $row], $value);`
	`315`	`+`
	`316`	`+ // Quote cell values that start with '=' to prevent evaluation of formulas`
	`317`	`+ if (is_string($value) && str_starts_with($value, '=')) {`
	`318`	`+ $activeWorksheet->getCell([$column, $row])->getStyle()->setQuotePrefix(true);`
	`319`	`+ }`
`315`	`320`	`}`
`316`	`321`	`}`
`317`	`322`	`}`