CVE-2023-3302: Excel export could lead to execute apps #1433 · Admidio/admidio@c87a707

Expand Up @@ -233,7 +233,9 @@ public function convertColumnContentForOutput(int $columnNumber, string $format,
// format value for csv export if ($format === ‘csv’) { $outputContent = $content; $content = preg_replace("/\t/", "\\t", $content); $content = preg_replace("/\r?\n/", "\\n", $content); $outputContent = preg_replace("/^[@=±]/", "#", $content); } // pdf should show only text and not much html content elseif ($format === ‘pdf’) { Expand Down