fix(calls): Fix displayname when exporting call participants

Signed-off-by: Joas Schilling <[email protected]>

Author: nickvergessen

lib/Controller/CallController.php

@@ -166,12 +166,12 @@ public function downloadParticipantsForCall(string $format = 'csv'): DataDownloa
 			} elseif ($participant->getAttendee()->getActorType() === Attendee::ACTOR_USERS) {
 				$email = $this->userManager->get($participant->getAttendee()->getActorId())?->getEMailAddress() ?? '';
 			}
-			fputcsv($output, [
+			fputcsv($output, array_map([$this, 'escapeFormulae'], [
 				$participant->getAttendee()->getDisplayName(),
 				$email,
 				$participant->getAttendee()->getActorType(),
 				$participant->getAttendee()->getActorId(),
-			], escape: '');
+			]), escape: '');
 		}
 
 		fseek($output, 0);
@@ -198,6 +198,13 @@ public function downloadParticipantsForCall(string $format = 'csv'): DataDownloa
 		return new DataDownloadResponse(stream_get_contents($output), $fileName, 'text/csv');
 	}
 
+	protected function escapeFormulae(string $value): string {
+		if (preg_match('/^[=+\-@\t\r]/', $value)) {
+			return "'" . $value;
+		}
+		return $value;
+	}
+
 	/**
 	 * Join a call
 	 *

tests/integration/features/callapi/public.feature

@@ -95,17 +95,18 @@ Feature: callapi/public
     And user "guest" joins call "room" with 200 (v4)
     Then user "participant1" sees 2 peers in call "room" with 200 (v4)
     And user "guest" sees 2 peers in call "room" with 200 (v4)
+    And guest "guest" sets name to "=1+1" in room "room" with 200 (v1)
     And invoking occ with "user:setting participant1 settings email [email protected]"
     And user "participant2" downloads call participants from "room" as "csv" with 403 (v4)
     And user "participant1" downloads call participants from "room" as "csv" with 200 (v4)
       | name                     | email                    | type   | identifier   |
       | participant1-displayname | participant1@example.tld | users  | participant1 |
-      |                          |                          | guests | guest1       |
+      | '=1+1                    |                          | guests | guest1       |
     Then user "guest" leaves call "room" with 200 (v4)
     And user "participant1" downloads call participants from "room" as "csv" with 200 (v4)
       | name                     | email                    | type   | identifier   |
       | participant1-displayname | participant1@example.tld | users  | participant1 |
-      |                          |                          | guests | guest1       |
+      | '=1+1                    |                          | guests | guest1       |
     And invoking occ with "user:setting participant1 settings email --delete"
     Then user "participant1" sees 1 peers in call "room" with 200 (v4)
     And user "guest" sees 1 peers in call "room" with 200 (v4)