Marijn cd293aa86f Prevent formula injection in spreadsheet exports ...

Answer/candidate text starting with =, +, -, or @ was written to XLSX
exports as a live formula rather than plain text. Since seasons can
have multiple owners, a co-owner could plant a formula that runs (and
can exfiltrate data) when another owner opens the export in Excel.

2026-07-13 09:31:14 +02:00

..

Command

Create Testcoverage and upgrade Symfomy and PHP

2025-11-28 22:56:09 +01:00

Controller

Add authorization checks to PrepareEliminationController

2026-07-13 09:09:04 +02:00

DataFixtures

feat: user settings page (#191)

2026-07-08 14:38:32 +02:00

Dto

Answer on candidate (#72)

2026-03-22 22:40:25 +01:00

Entity

feat: password reset (#179) (#186)

2026-07-07 21:43:24 +00:00

Enum

feat: season question bank & quiz finalisation (#101) (#176)

2026-07-05 21:36:33 +02:00

Exception

feat: season question bank & quiz finalisation (#101) (#176)

2026-07-05 21:36:33 +02:00

Factory

Create Testcoverage and upgrade Symfomy and PHP

2025-11-28 22:56:09 +01:00

Form

Add reset progress action for a candidate's quiz attempt, and modal-based candidate editing (#204)

2026-07-12 18:31:06 +02:00

Helpers

Prevent formula injection in spreadsheet exports

2026-07-13 09:31:14 +02:00

Repository

Add reset progress action for a candidate's quiz attempt, and modal-based candidate editing (#204)

2026-07-12 18:31:06 +02:00

Security

Add fullscreen toggle and return-to-page logout redirect (#200)

2026-07-09 21:30:06 +00:00

Service

Prevent formula injection in spreadsheet exports

2026-07-13 09:31:14 +02:00

Kernel.php

Change namespace to Tvdt

2025-09-28 18:14:58 +02:00