Re:Dangers of CSV Injection
by steventhedev on Tuesday October 10, 2017 @08:27AM
(#15441176)
More to the point, it's easy to export from Excel, which is a massive pain to load in any non-.NET language.
While it's great to hope to use a well defined transport for machine-to-machine communication, it's exhausting to explain anything beyond CSV to Bob from sales.
That, and data in CSV format is human readable in any old text editor or even work processor which many use as a quick sanity check to make sure their data looks sane. A lot of editors will not display the ASCII control characters at all so the fields on the line get mashed together, or may even reject the file as containing what it considers to be unexpected characters.