[Libreoffice-bugs] [Bug 114878] Add option to CSV import to disable formula injection

[bugzilla-daemon at bugs.documentfoundation.org]

https://bugs.documentfoundation.org/show_bug.cgi?id=114878

--- Comment #9 from jomo <documentfoundation at jomo.tv> ---
(In reply to Mike Kaganski from comment #2)
> this doesn't differ from any other spreadsheet file being opened in a spreadsheet application, where formulas can appear. If you use XLS, or ODS, or anything, there are formulas, and they may do all the same kind of things.

I disagree. CSV is not a "spreadsheet file" comparable to XLS or ODS. CSV is
Comma-separated values (where all values are text).

When importing, say, a CSV file with a list of comments, I would not expect
formulas to be executed only because a comment started with an equals sign.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/libreoffice-bugs/attachments/20180412/e9b7db5c/attachment.html>