getActiveSheet();
$payload = '
';
$sheet->setCellValue('A1', $payload);
$sheet->getStyle('A1')
->getNumberFormat()
->setFormatCode($formatCode);
$writer = new HtmlWriter($spreadsheet);
$html = $writer->generateHTMLAll();
self::assertStringContainsString('<img src=x onerror=alert(document.domain)>', $html);
self::assertStringNotContainsString('', $html);
$spreadsheet->disconnectWorksheets();
}
/** @return array */
public static function providerFormat(): array
{
return [
['General'],
['#'],
['yyyy-mm-dd'],
['0%'],
['@'],
['@ "items"'],
['. @'],
['@ '],
];
}
}