That would make safety an "opt in" measure, it should be "opt out" instead. Make... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

mark-r on Oct 10, 2017 | parent | context | favorite | on: Dangers of CSV Injection

That would make safety an "opt in" measure, it should be "opt out" instead. Make the CSV format stop interpreting formulas unless you specifically ask it to. Most people don't put formulas in their CSV files anyway.

mulmen on Oct 10, 2017 [–]

The CSV format doesn't interpret anything, it's spreadsheet applications doing that.

mark-r on Oct 10, 2017 | [–]

Sorry if I was unclear, that was exactly what I meant - applications that open CSV files.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact