pangolin_mirror/pangolin
1
0
Fork 0
mirror of https://github.com/fosrl/pangolin.git synced 2026-10-22 12:39:05 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #3877 from MauryaQbit/fix/csv-injection-in-generate-csv

Browse Source 
Neutralise formula prefixes in CSV log exports
This commit is contained in:
Owen Schwartz
2026-10-19 13:41:23 -04:00
committed by GitHub
parent f4558538de ae36ca3127
commit 22f42e225b
7 changed files with 255 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files
server/private/routers/auditLogs/exportAccessAuditLog.ts
+1 -1
View File
@@ -99,7 +99,7 @@ export async function exportAccessAuditLogs(
const csvData = generateCSV(log);
res.setHeader("Content-Type", "text/csv");
res.setHeader("Content-Type", "text/csv; charset=utf-8");
res.setHeader(
"Content-Disposition",
`attachment; filename="access-audit-logs-${data.orgId}-${Date.now()}.csv"`
server/private/routers/auditLogs/exportActionAuditLog.ts
+1 -1
View File
@@ -99,7 +99,7 @@ export async function exportActionAuditLogs(
const csvData = generateCSV(log);
res.setHeader("Content-Type", "text/csv");
res.setHeader("Content-Type", "text/csv; charset=utf-8");
res.setHeader(
"Content-Disposition",
`attachment; filename="action-audit-logs-${data.orgId}-${Date.now()}.csv"`
server/private/routers/auditLogs/exportConnectionAuditLog.ts
+1 -1
View File
@@ -101,7 +101,7 @@ export async function exportConnectionAuditLogs(
const csvData = generateCSV(log);
res.setHeader("Content-Type", "text/csv");
res.setHeader("Content-Type", "text/csv; charset=utf-8");
res.setHeader(
"Content-Disposition",
`attachment; filename="connection-audit-logs-${data.orgId}-${Date.now()}.csv"`