getActiveSheet(); $sheet->getCell('A1')->setValue('Click me'); $hyperlink = new Hyperlink('http://www.example.com'); $sheet->getCell('A1')->setHyperlink($hyperlink); $sheet->getCell('A2')->setValue('JS link'); $hyperlink2 = new Hyperlink('javascript:alert(\'hello1\')'); $sheet->getCell('A2')->setHyperlink($hyperlink2); $sheet->getCell('A3')->setValue('=HYPERLINK("javascript:alert(\'hello2\')", "jsfunc click")'); $writer = new Html($spreadsheet); $html = $writer->generateHTMLAll(); self::assertStringContainsString('Click me', $html, 'http hyperlink retained'); self::assertStringContainsString('javascript:alert(\'hello1\')', $html, 'javascript hyperlink dropped'); self::assertStringContainsString('javascript:alert(\'hello2\')', $html, 'javascript hyperlink function dropped'); $spreadsheet->disconnectWorksheets(); } }