Hacker News new | ask | show | jobs
by Dylan16807 3179 days ago
So data entered safely into Excel, exported from Excel, and imported back into Excel... can inject code.

Amazing.
1 comments
nulagrithom 3179 days ago
Subtly worse. Save the CSV with the `, then close it and load it again. Boom. Formula works again. (Just tested it.)

Technically it's exported and imported I suppose, but it makes no difference to the user.

link