From Dev.to
Spreadsheet exports need formula-injection controls at the data boundary
Spreadsheet exports need formula-injection controls at the data boundary A CSV export can become an active document when someone opens it in a spreadsheet. Cells beginning with characters such as =,...