Re:Dangers of CSV Injection
by pvdebbe on Tuesday October 10, 2017 @01:21AM
(#15439550)
The only good CSV dialect is the dif-named DSV (Delimiter Separated Values) where you select and support just one supported delimiter, and you require escaping of the delim character inside values. It's simple, it works. Quotes are hard to parse so don't use those. Just \escape.
http://www.catb.org/esr/writings/taoup/html/ch05s02.html