Export to CSV no longer available

G’day Kranthi,

CSV export was disabled by default starting in v5.10 as part of ongoing security certification work. CSV files expose credentials in plaintext and are susceptible to formula injection when opened in spreadsheet software. You can re-enable it if you understand and accept those risks.

On the Virtual Appliance, the config file is at /etc/passbolt/passbolt.php. Add the following inside the 'passbolt' array:

'plugins' => [
    'exportPolicies' => [
        'allowCsvFormat' => true,
    ],
],

If there’s already a 'plugins' key in that file, merge this into the existing array rather than adding a duplicate key.

After making the change, clear the cache:

sudo -H -u www-data bash -c "/usr/share/php/passbolt/bin/cake cache clear_all"

The CSV option should then appear when you use the export function in the browser extension. The path you tried (/usr/share/php/passbolt/plugins/PassboltCe/WebInstaller/...) is the installer template, not the live configuration, so changes there have no effect. Similarly, setting the environment variable in /etc/environment won’t work because the web server process doesn’t read variables from there.

Let me know how you go and if you have any further questions.

Cheers
Gareth