A downloaded invoice makes the accountant's spreadsheet show a security warning and a link

Component: Spreadsheet export (support's guess) · Linked: BILL-411 (customer's antivirus alert, unrelated?)

From: Marcus Oyelaran, operations, Brightwell Dental Supplies · Received: Tue 21 Oct, 4:12 pm

Hi, our accountant Priya downloaded one of our invoices from Ledgerly yesterday so she could put it in the books. When she opened the file in Excel it popped up a yellow bar saying something about links to external data and asking if she wanted to enable them, and one of the cells showed a blue underlined phrase like "Click to confirm payment" that she did not expect. She did not click it, thank goodness. Our IT guy says her laptop has been flaky and thinks it is a virus on her machine, and our antivirus did flag something last week. But then I downloaded the same invoice on my own computer and my Excel did the same thing, so I am not so sure. Nobody here typed anything like that into the invoice. We pass invoice details around between departments a lot, and some of it gets pasted in from emails and our buying system.

Please tell us whether Ledgerly is putting this in our files, and whether the files we already downloaded are safe to open. Marcus

Support note (Dana K.): Marcus's laptop and Priya's both showed it, so I doubt it is one infected PC. I opened the same downloaded file in a plain text editor and nothing looked wrong to me, just the usual columns. A test invoice I made with ordinary text opens fine. I have not checked anything other than invoices for this customer. Not sure whether the problem is in this file only or in how we write files in general.

Ask: make sure files people download from Ledgerly cannot make a spreadsheet run or link to anything, now or for any text a customer has typed or pasted. Ordinary names and notes (dashes, plus signs, at-signs in the middle of text) must come out exactly as they were entered.