fix xss in excel_parser (#9909)

### What problem does this PR solve?



### Type of change

- [x] Bug Fix (non-breaking change which fixes an issue)
- [x] Refactoring
- [x] Performance Improvement

Signed-off-by: zhanluxianshen <zhanluxianshen@163.com>
This commit is contained in:
湛露先生 2025-09-05 09:58:03 +08:00 committed by GitHub
parent 9b724b3b5e
commit 1ee9c0b8d9
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -124,7 +124,7 @@ class RAGFlowExcelParser:
if c.value is None:
tb += "<td></td>"
else:
tb += f"<td>{c.value}</td>"
tb += f"<td>{escape(_fmt(c.value))}</td>"
tb += "</tr>"
tb += "</table>\n"
tb_chunks.append(tb)