News for hackers. Stuff that matters.
Re:Dangers of CSV Injection by pvdebbe on Tuesday October 10, 2017 @01:21AM (#15439550)
The only good CSV dialect is the dif-named DSV (Delimiter Separated Values) where you select and support just one supported delimiter, and you require escaping of the delim character inside values. It's simple, it works. Quotes are hard to parse so don't use those. Just \escape.

http://www.catb.org/esr/writings/taoup/html/ch05s02.html

There are no comments on this comment yet.