I had not known that Excel would accept formulae from CSV files. I wonder if LibreOffice and OpenOffice have the same "mis-feature". I do, of course, inspect CSV files in a text editor, then use a sandbox account to open them. (And I do NOT open "Office" files on my personal PC.)
With this new feature in Text::CSV_XS, I will have a new tool to help screen CSV files. Thanks.
Update: At work, where I do have to use documents sent to me via email, I have a work-issued, Windows PC and I don't accept documents directly from outsiders. Since all customer documents are required to be vetted by the project management team, I let them take the risk, first. Documents from inside the company, I can't avoid the risk (but it's my "office PC" that's at risk). Any others, I delete. When I do have to open questionable files on my development PC, I open them first on my office PC, then I use the sandbox account on the dev PC.
In reply to Re: Be prepared for CSV injections in spreadsheet
by RonW
in thread Be prepared for CSV injections in spreadsheet
by Tux
| For: | Use: | ||
| & | & | ||
| < | < | ||
| > | > | ||
| [ | [ | ||
| ] | ] |