TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

The Underestimated Dangers of CSV Injection

3 点作者 MarcellusDrum超过 1 年前

1 comment

maplet超过 1 年前
The article is 6 years old but the CSV Injection still works on Google Sheets and Excel. (I imported the example csv file into both platforms and the equations were executed)<p>Great reminder to be vigilant. Pride cometh before a fall:<p>&gt; Are they a technically savvy user? Then it is even worse. They know the CSV format is just text data, there can’t possibly be anything harmful in there. Guaranteed.