News for hackers. Stuff that matters.
Re:Dangers of CSV Injection by kristofferR on Tuesday October 10, 2017 @12:58AM (#15439470)
Unicode is vast. There's absolutely no good reason we don't have Snowman Separated Values (or some other proper separator sign that isn't commonly used elsewhere) other than that people don't demand it.
Re:Dangers of CSV Injection by Mindless2112 on Tuesday October 10, 2017 @01:12AM (#15439522)
You don't even need to go to Unicode. ASCII has

  0x1C  FS  File Separator
  0x1D  GS  Group Separator
  0x1E  RS  Record Separator
  0x1F  US  Unit Separator
You just need a font with glyphs for them.

https://en.wikipedia.org/wiki/Delimiter#ASCII_delimited_text

Re:Dangers of CSV Injection by flukus on Tuesday October 10, 2017 @03:07AM (#15439926)
Where can I find those on my keyboard? Entering escape sequences by hand isn't user friendly, if it works at all. One of the benefits of csv is that it's universal, I can open it in vim or write an awk script to extract values, someone else can open in notepad++, someone else should be able to open in excel.
Re:Dangers of CSV Injection by xelxebar on Tuesday October 10, 2017 @07:36AM (#15440933)
Just thinking out loud here, but isn't part of the point is that they are not keyboard characters. If they're on the keyboard, then they will pop up in ordinary text, similar to the | (pipe) character and friends.
Re:Dangers of CSV Injection by cup-of-tea on Tuesday October 10, 2017 @04:02AM (#15440129)
They are ^\ ^] ^^ and ^_, respectively. Of course, most text editors will interpret those keys as something else. In emacs you can enter them literally by using C-q (quote) first.
Re:Dangers of CSV Injection by unwind on Tuesday October 10, 2017 @04:24AM (#15440217)
Since we're kind of talking about things from an I18N perspective, those characters are written like this on a bog standard Swedish keyboard:

    \ is AltGr+?
    ] is AltGr+9
    ^ is Shift+^, then space
    _ is Shift+-
AltGr is the right Alt key, to the right of the space bar.

So none of those are single keys, which means that combining them with Ctrl to write control characters becomes almost comically difficult. Not very accessible to typical users, I'd say.

Re:Dangers of CSV Injection by unwind on Tuesday October 10, 2017 @08:42AM (#15441267)
Actually \ is AltGr++, i.e. "+" is the symbol you get from that key without any modifier. With shift you get ? and with AltGr you get \. My bad, and too late to edit.
Re:Dangers of CSV Injection by btown on Tuesday October 10, 2017 @01:03AM (#15439493)
Herein lies the slippery slope to APL...