<html> <head> <base href="https://bugs.documentfoundation.org/"> </head> <body> <div> <a class="bz_bug_link bz_status_NEW " title="NEW - Add option to CSV import to disable formula injection" href="https://bugs.documentfoundation.org/show_bug.cgi?id=114878#c9">Comment # 9</a> on <a class="bz_bug_link bz_status_NEW " title="NEW - Add option to CSV import to disable formula injection" href="https://bugs.documentfoundation.org/show_bug.cgi?id=114878">bug 114878</a> from <a class="email" href="mailto:documentfoundation@jomo.tv" title="jomo <documentfoundation@jomo.tv>"> jomo</a> <pre>(In reply to Mike Kaganski from <a href="show_bug.cgi?id=114878#c2">comment #2</a>) > this doesn't differ from any other spreadsheet file being opened in a spreadsheet application, where formulas can appear. If you use XLS, or ODS, or anything, there are formulas, and they may do all the same kind of things. I disagree. CSV is not a "spreadsheet file" comparable to XLS or ODS. CSV is Comma-separated values (where all values are text). When importing, say, a CSV file with a list of comments, I would not expect formulas to be executed only because a comment started with an equals sign.</pre> </div> <hr> You are receiving this mail because: <ul> <li>You are the assignee for the bug.</li> </ul> </body> </html>