News for hackers. Stuff that matters.

A comment on Dangers of CSV Injection. Parent comment

Re:Dangers of CSV Injection by Dylan16807 on Tuesday October 10, 2017 @01:37PM (#15443722)
So data entered safely into Excel, exported from Excel, and imported back into Excel... can inject code.

Amazing.

[ Parent | on HN ]
Re:Dangers of CSV Injection by nulagrithom on Tuesday October 10, 2017 @01:52PM (#15443836)
Subtly worse. Save the CSV with the `, then close it and load it again. Boom. Formula works again. (Just tested it.)

Technically it's exported and imported I suppose, but it makes no difference to the user.

[ Parent | on HN ]