-
Type: Bug
-
Status: Resolved
-
Priority: Minor
-
Resolution: Fixed
-
Affects Version/s: 2021
-
Component/s: CSV
-
Release Notes Summary:CSV injectable values are now escaped.
-
Backlog priority:700
-
Sprint:nxplatform #77, nxplatform #78, nxplatform #79
-
Story Points:3
Steps to reproduce:
- set the value -2147483648 to the field dublincore:source on a File document
- navigate to the parent folder
- click on the CSV export button
- a CSV file is downloaded
- open the CSV file and observe that the value for dublincore:source is now 2147483648 => the dashboard has been removed
Expected result: the value for dublincore:source in the CSV export is -2147483648
- is caused by
-
NXP-30590 Escape/sanitize the first malicious character of a cell in a CSV export to avoid CSV injection
- Resolved