From 2c8659476ecaaf8faa0ad019d1a7e05f710d568a Mon Sep 17 00:00:00 2001 From: Lucas Gass Date: Fri, 19 Sep 2025 00:11:41 +0000 Subject: [PATCH] Bug 36831: (follow-up): Add formula injection protection Without patch: prove /kohadevbox/koha/xt/author/Text_CSV_Various.t FAIL With patch: prove /kohadevbox/koha/xt/author/Text_CSV_Various.t PASS --- Koha/ERM/EHoldings/Title.pm | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/Koha/ERM/EHoldings/Title.pm b/Koha/ERM/EHoldings/Title.pm index f82a2cf558d..0db844540fc 100644 --- a/Koha/ERM/EHoldings/Title.pm +++ b/Koha/ERM/EHoldings/Title.pm @@ -124,7 +124,8 @@ sub read_file { sep_char => $delimiter, quote_char => $quote_char, binary => 1, - allow_loose_quotes => 1 + allow_loose_quotes => 1, + formula => 'empty', } ); -- 2.39.5