MAGETWO-45047: Data modification in Export result file

Author: Leonid Poluyanov

lib/internal/Magento/Framework/Convert/Excel.php

@@ -134,6 +134,19 @@ protected function _getXmlRow($row, $useCallback)
             $value = htmlspecialchars($value);
             $dataType = is_numeric($value) && $value[0] !== '+' && $value[0] !== '0' ? 'Number' : 'String';
 
+            /**
+             * Security enhancement for CSV data processing by Excel-like applications.
+             * @see https://bugzilla.mozilla.org/show_bug.cgi?id=1054702
+             *
+             * @var $value string|\Magento\Framework\Phrase
+             */
+            if (!is_string($value)) {
+                $value = (string)$value;
+            }
+            if (isset($value[0]) && in_array($value[0], ['=', '+', '-'])) {
+                $value = ' ' . $value;
+            }
+
             $value = str_replace("\r\n", '
', $value);
             $value = str_replace("\r", '
', $value);
             $value = str_replace("\n", '
', $value);