# The Absurdly Underestimated Dangers of CSV Injection

<http://georgemauer.net/2017/10/07/csv-injection.html>

- Host: [georgemauer.net](https://links.thingelstad.xyz/hosts/georgemauer.net/)
- Saved: October 10, 2017 (2017-10-10T11:06:59Z)
- Record: https://links.thingelstad.xyz/links/c9005c4f6fbf/
- JSON: https://links.thingelstad.xyz/links/c9005c4f6fbf.json

## What Jamie wrote

Interesting writeup on injecting formulas into CSV data to affect the behavior of the software that is reading the CSV. This example uses the preference that spreadsheets have to interpret formulas embedded in CSV files. Security risks like this can be surprising, even to very technical people, since the data isn't an executable itself.

## Facts

- Kind: [Page](https://links.thingelstad.xyz/kinds/page/)

## Appears in

- [WT23: Weekly Thing for October 14, 2017](https://weekly.thingelstad.com/archive/23/), Links 📌

## Saved the same week

- [The Value of Optimizing for Resilience - DZone Performance](https://links.thingelstad.xyz/links/a3dcab753947/) (dzone.com, October 9, 2017)
- [What Sephora Knows About Women in Tech That Silicon Valley Doesn’t - WSJ](https://links.thingelstad.xyz/links/3d9990421e2c/) (wsj.com, October 10, 2017)
- [Algolia | The Most Reliable Platform for Building Search](https://links.thingelstad.xyz/links/f24d3afbb4b7/) (algolia.com, October 10, 2017)
- [Replacing our search with Algolia | Netlify](https://links.thingelstad.xyz/links/8f463fc82c90/) (netlify.com, October 10, 2017)
- [Behind the Magic: How we built the ARKit Sudoku Solver](https://links.thingelstad.xyz/links/13bcdd2077dd/) (blog.prototypr.io, October 11, 2017)

## Elsewhere

- Wayback Machine: https://web.archive.org/web/*/http://georgemauer.net/2017/10/07/csv-injection.html