Marijn cd293aa86f Prevent formula injection in spreadsheet exports ...

Answer/candidate text starting with =, +, -, or @ was written to XLSX
exports as a live formula rather than plain text. Since seasons can
have multiple owners, a co-owner could plant a formula that runs (and
can exfiltrate data) when another owner opens the export in Excel.

2026-07-13 09:31:14 +02:00

..

DataExportServiceRawAnswersColumnsTest.php

fix: support more than 25 columns in data export sheets (#205)

2026-07-10 19:30:37 +02:00

DataExportServiceTest.php

Prevent formula injection in spreadsheet exports

2026-07-13 09:31:14 +02:00

GitHubReleasesServiceTest.php

Migrate frontend to TypeScript with Deno-based tooling (#209)

2026-07-12 22:11:00 +02:00

QuizSpreadsheetServiceTest.php

Prevent formula injection in spreadsheet exports

2026-07-13 09:31:14 +02:00