Beefy Boxes and Bandwidth Generously Provided by pair Networks
There's more than one way to do things
 
PerlMonks  

Re: Be prepared for CSV injections in spreadsheet

by RonW (Parson)
on Oct 19, 2017 at 00:45 UTC ( #1201638=note: print w/replies, xml ) Need Help??


in reply to Be prepared for CSV injections in spreadsheet

I had not known that Excel would accept formulae from CSV files. I wonder if LibreOffice and OpenOffice have the same "mis-feature". I do, of course, inspect CSV files in a text editor, then use a sandbox account to open them. (And I do NOT open "Office" files on my personal PC.)

With this new feature in Text::CSV_XS, I will have a new tool to help screen CSV files. Thanks.

Update: At work, where I do have to use documents sent to me via email, I have a work-issued, Windows PC and I don't accept documents directly from outsiders. Since all customer documents are required to be vetted by the project management team, I let them take the risk, first. Documents from inside the company, I can't avoid the risk (but it's my "office PC" that's at risk). Any others, I delete. When I do have to open questionable files on my development PC, I open them first on my office PC, then I use the sandbox account on the dev PC.

  • Comment on Re: Be prepared for CSV injections in spreadsheet

Log In?
Username:
Password:

What's my password?
Create A New User
Node Status?
node history
Node Type: note [id://1201638]
help
Chatterbox?
and the web crawler heard nothing...

How do I use this? | Other CB clients
Other Users?
Others surveying the Monastery: (3)
As of 2019-07-20 23:56 GMT
Sections?
Information?
Find Nodes?
Leftovers?
    Voting Booth?
    If you were the first to set foot on the Moon, what would be your epigram?






    Results (7 votes). Check out past polls.

    Notices?