MAGETWO-37209: Excel Formula Injection via CSV/XML export - 2.x

Author: Yaroslav Onischenko

app/code/Magento/Catalog/view/adminhtml/web/catalog/product/composite/configure.js

@@ -7,8 +7,7 @@ define([
     "jquery/ui",
     "mage/translate",
     "prototype",
-    "Magento_Ui/js/modal/modal",
-    "domReady!"
+    "Magento_Ui/js/modal/modal"
 ], function(jQuery){
 
     window.ProductConfigure = Class.create();

app/code/Magento/Sales/view/adminhtml/layout/sales_order_create_index.xml

@@ -21,6 +21,7 @@
         </referenceBlock>
         <referenceContainer name="after.body.start">
             <block class="Magento\Backend\Block\Template" name="optional_zip_countries" as="optional_zip_countries" template="Magento_Directory::js/optional_zip_countries.phtml"/>
+            <block class="Magento\Catalog\Block\Adminhtml\Product\Composite\Configure" template="Magento_Catalog::catalog/product/composite/configure.phtml"/>
         </referenceContainer>
         <referenceContainer name="js">
             <block class="Magento\Backend\Block\Template" template="Magento_Sales::order/create/js.phtml" name="create"/>
@@ -75,8 +76,5 @@
                 </block>
             </block>
         </referenceBlock>
-        <referenceContainer name="before.body.end">
-            <block class="Magento\Catalog\Block\Adminhtml\Product\Composite\Configure" template="Magento_Catalog::catalog/product/composite/configure.phtml"/>
-        </referenceContainer>
     </body>
 </page>