CSV exports adds leading apostrophes to negative number values

XMLWordPrintable

    • Type: Bug
    • Resolution: Unresolved
    • Priority: Low
    • None
    • Affects Version/s: 9.9.0, 9.10.0, 9.11.0, 9.12.0, 9.12.2
    • Component/s: CSV export
    • None
    • 9.09
    • 3
    • Severity 3 - Minor
    • 1

      Issue Summary

      This is reproducible on Data Center: (yes) / (no)

      Steps to Reproduce

      1. Add a Number Custom field and create few issues with -ve number
      2. Export the results in csv format

      Expected Results

      Before migration a negative numerical value would appear normally in a csv export, for example: -1000. 

      Actual Results

      CSV exports adds leading apostrophes to negative number values.for example: '-1000. 

      Workaround

      This is a result of a security fix VULN-1043532 - CVS Injection vulnerability identified while export issue in CSV file. The old behaviour could be restored by enabling with the "com.atlassian.jira.security.csv.export.injection.protection.disabled" dark feature flag.  However, please be aware that enabling this flag reintroduces VULN-1043532 - CVS Injection vulnerability identified while export issue in CSV file

       

      Additional Notes:

      Regression seems to have got introduced in 9.9.0 version as it has worked till 9.8.0

            Assignee:
            Unassigned
            Reporter:
            Sandip Shrivastava
            Votes:
            6 Vote for this issue
            Watchers:
            8 Start watching this issue

              Created:
              Updated: