Drawing text annotation now use the new format functions instead of executing arbitrary code.

This commit is contained in:
Dion Moult
2023-09-07 13:05:03 +10:00
parent b792fff98c
commit e8b52d3d93
2 changed files with 4 additions and 3 deletions
+1 -1
View File
@@ -238,7 +238,7 @@ class IfcCsv:
if row[index] == null:
continue
if not isinstance(row[index], str):
row[index] = '"' + str(row[index]) + '"'
row[index] = '"' + str(row[index]).replace('"', '\\"') + '"'
row[index] = ifcopenshell.util.selector.format(format_query.replace("{{value}}", row[index]))
def sort_results(self, sort, attributes, include_global_id):