View Issue Details

IDProjectCategoryView StatusLast Update
0034441mantisbtexcelpublic2024-05-12 12:34
Reporterdregad Assigned Todregad  
PrioritynormalSeverityminorReproducibilityalways
Status closedResolutionfixed 
Target Version2.26.2Fixed in Version2.26.2 
Summary0034441: Excel error when opening exported issues with custom field with special characters
Description

If a custom field containing < is included in the list of columns exported to Excel, then Excel throws an error and is not able to open the file.

Steps To Reproduce
  1. Define a custom field named Test <Field
  2. Add custom field to project
  3. Configure columns to include the custom field in Excel exports
  4. From View issues, export to Excel
  5. Open the exported file in Excel
Additional Information

Originally reported by @unboundeduniverse in 0034432:0068923

TagsNo tags attached.
Attached Files
image.png (159,574 bytes)   
image.png (159,574 bytes)   

Relationships

related to 0034432 closeddregad CVE-2024-34081: Unsanitised custom field names printed 

Activities

Related Changesets

MantisBT: master-2.26 a81691fb

2024-05-12 08:39

dregad


Details Diff
Excel Export: escaping of Column Title

Prior to this, a Custom Field names containing special characters would
cause Excel to throw an error when trying to open an exported file
containing this column.

Fixes 0034441
Affected Issues
0034441
mod - core/excel_api.php Diff File