News for hackers. Stuff that matters.

A comment on Dangers of CSV Injection. Parent comment

Re:Dangers of CSV Injection by mark-r on Tuesday October 10, 2017 @10:30AM (#15442066)
That would make safety an "opt in" measure, it should be "opt out" instead. Make the CSV format stop interpreting formulas unless you specifically ask it to. Most people don't put formulas in their CSV files anyway.
[ Parent | on HN ]
Re:Dangers of CSV Injection by mulmen on Tuesday October 10, 2017 @01:18PM (#15443539)
The CSV format doesn't interpret anything, it's spreadsheet applications doing that.
[ Parent | on HN ]
Re:Dangers of CSV Injection by mark-r on Tuesday October 10, 2017 @02:13PM (#15444013)
Sorry if I was unclear, that was exactly what I meant - applications that open CSV files.
[ Parent | on HN ]