Use EscapeFormula() in CSV export

Signed-off-by: snipe <snipe@snipe.net>
snipe · Sep 30, 2022 · bae200e · bae200e
1 parent 2fd197c
commit bae200e
Showing 1 changed file with 5 additions and 2 deletions.
diff --git a/app/Http/Controllers/ReportsController.php b/app/Http/Controllers/ReportsController.php
@@ -22,7 +22,7 @@
 use Input;
 use League\Csv\Reader;
 use Symfony\Component\HttpFoundation\StreamedResponse;
-
+use League\Csv\EscapeFormula;
 /**
  * This controller handles all actions related to Reports for
  * the Snipe-IT Asset Management application.
@@ -666,6 +666,9 @@ public function postCustom(Request $request)
                 $executionTime = microtime(true) - $_SERVER['REQUEST_TIME_FLOAT'];
                 \Log::debug('Walking results: '.$executionTime);
                 $count = 0;
+
+                $formatter = new EscapeFormula("`");
+
                 foreach ($assets as $asset) {
                     $count++;
                     $row = [];
@@ -855,7 +858,7 @@ public function postCustom(Request $request)
                             $row[] = $asset->$column_name;
                         }
                     }
-                    fputcsv($handle, $row);
+                    fputcsv($handle, $formatter->escapeRecord($row));
                     $executionTime = microtime(true) - $_SERVER['REQUEST_TIME_FLOAT'];
                     \Log::debug('-- Record '.$count.' Asset ID:'.$asset->id.' in '.$executionTime);
                 }