summaryrefslogtreecommitdiffhomepage
path: root/CHANGELOG.md
diff options
context:
space:
mode:
authorjohnnyshields <[email protected]>2023-04-13 02:58:17 +0900
committerKoza <[email protected]>2023-10-02 13:37:17 +0200
commit5e0c5de04a098204e14e0f313a4ed4097743992e (patch)
treeee7542cbc9ffdc977fd4d251892b79023c0fbaa6 /CHANGELOG.md
parentebbeaea97ad7b4a597b34d9283abd74aa2e4e077 (diff)
downloadcaxlsx-5e0c5de04a098204e14e0f313a4ed4097743992e.tar.gz
caxlsx-5e0c5de04a098204e14e0f313a4ed4097743992e.zip
Set escape_formulas as "true" as a global default.
Diffstat (limited to 'CHANGELOG.md')
-rw-r--r--CHANGELOG.md1
1 files changed, 1 insertions, 0 deletions
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 67ca1cfe..d09e3196 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -8,6 +8,7 @@ CHANGELOG
- Fix `Workbook#sheet_by_name` not returning sheets with encoded characters in the name
- Raise exception if `axlsx_styler` gem is present as its code was merged directly into `caxlsx` in v3.3.0
- Add 'SortState' and 'SortCondition' classes to the 'AutoFilter' class to add sorting to the generated file.
+ - [PR #189](https://github.com/caxlsx/caxlsx/pull/189) - Make `Axlsx::escape_formulas` true by default to mitigate [Formula Injection](https://www.owasp.org/index.php/CSV_Injection) vulnerabilities.
- **April.23.23**: 3.4.1
- [PR #209](https://github.com/caxlsx/caxlsx/pull/209) - Revert characters other than `=` being considered as formulas.