Dangers of CSV Injection

Re:Dangers of CSV Injection by baldfat on Tuesday October 10, 2017 @08:23AM (#15441154)

I am happy when I see I can get data via CSV over the other delivery methods people use. My local school board prints out all their data and then scans them into a PDF, ugh. I had one vendor that on purpose made the data only available in forms that would take me 600+ lines of code to clean up in mangled ASCII format.

I use CSV all the time when I am working with R. My data can come in the form of CSV, XLS, or PDF. Which would you want to work with?

I can easily look at the data. I never touch my incoming data and my output is in reports, but CSV can be the easiest way to get data into a computer.

[ Parent | on HN ]

Re:Dangers of CSV Injection by mnx on Tuesday October 10, 2017 @09:26AM (#15441538)

Actually, XLS is not bad to work with, if you have a library for it. And it's well defined, unlike CSV. Insofar as I know, there's no way to make a CSV file that will open and show nicely in all popular versions of excel / google docs/ open office, especially across language settings. And a well formed XLS file will just work.

[ Parent | on HN ]