Beefy Boxes and Bandwidth Generously Provided by pair Networks
There's more than one way to do things

Re: Be prepared for CSV injections in spreadsheet

by RonW (Parson)
on Oct 19, 2017 at 00:45 UTC ( #1201638=note: print w/replies, xml ) Need Help??

in reply to Be prepared for CSV injections in spreadsheet

I had not known that Excel would accept formulae from CSV files. I wonder if LibreOffice and OpenOffice have the same "mis-feature". I do, of course, inspect CSV files in a text editor, then use a sandbox account to open them. (And I do NOT open "Office" files on my personal PC.)

With this new feature in Text::CSV_XS, I will have a new tool to help screen CSV files. Thanks.

Update: At work, where I do have to use documents sent to me via email, I have a work-issued, Windows PC and I don't accept documents directly from outsiders. Since all customer documents are required to be vetted by the project management team, I let them take the risk, first. Documents from inside the company, I can't avoid the risk (but it's my "office PC" that's at risk). Any others, I delete. When I do have to open questionable files on my development PC, I open them first on my office PC, then I use the sandbox account on the dev PC.

  • Comment on Re: Be prepared for CSV injections in spreadsheet

Log In?

What's my password?
Create A New User
Node Status?
node history
Node Type: note [id://1201638]
and the web crawler heard nothing...

How do I use this? | Other CB clients
Other Users?
Others surveying the Monastery: (3)
As of 2019-07-20 23:56 GMT
Find Nodes?
    Voting Booth?
    If you were the first to set foot on the Moon, what would be your epigram?

    Results (7 votes). Check out past polls.