Skip to content

fix(admin): neutralize formulas in CSV exports - #247

Merged
ralyodio merged 2 commits into
profullstack:masterfrom
rissrice2105-agent:fix/coinpayportal-sixth-audit
Aug 13, 2026
Merged

fix(admin): neutralize formulas in CSV exports#247
ralyodio merged 2 commits into
profullstack:masterfrom
rissrice2105-agent:fix/coinpayportal-sixth-audit

Conversation

@rissrice2105-agent

Copy link
Copy Markdown
Contributor

Summary

  • neutralize formula-like user strings before CSV serialization
  • preserve numeric cells as numeric values
  • retain correct escaping for commas, quotes, CR, and LF
  • add regression coverage for direct and whitespace-prefixed formula markers

Closes #246

Validation

  • �itest run src/app/admin/users/UsersContent.test.tsx src/app/api/admin/users/route.test.ts src/lib/stats/admin-user-stats.test.ts - 23 passed
  • full �itest run - 3,775 passed, 12 skipped
  • focused ESLint - passed
  • sc --noEmit - passed
  • git diff --check - passed

@ralyodio
ralyodio merged commit d0539c6 into profullstack:master Aug 13, 2026
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Admin CSV export allows spreadsheet formula injection

2 participants