Mercurial > p > roundup > code
diff CHANGES.txt @ 6190:15fd91fd3c4c
Quote all exported CSV data
Quote all non-numeric data in csv export functions. Report that a
title like '=a2+b3' could be interpreted as a function in Excel and
executed. csv.writer now includes quoting=csv.QUOTE_NONNUMERIC to
generate quoted values for all fields. This should make the string
starting with = be interpreted as a string and not a formula.
| author | John Rouillard <rouilj@ieee.org> |
|---|---|
| date | Mon, 08 Jun 2020 16:18:21 -0400 |
| parents | 1cb2375015f0 |
| children | 6e0c4d50b97e |
line wrap: on
line diff
--- a/CHANGES.txt Sun Jun 07 18:10:51 2020 -0400 +++ b/CHANGES.txt Mon Jun 08 16:18:21 2020 -0400 @@ -19,6 +19,12 @@ Meerwald) - exception in logout action when there is no session (Christof Meerwald) +- quote all non-numeric data in csv export functions. Report that a + title like '=a2+b3' could be interpreted as a function in Excel and + executed. csv.writer now includes quoting=csv.QUOTE_NONNUMERIC to + generate quoted values for all fields. This makes the string + starting with = be interpreted as a string and not a formula. (John + Rouillard as reported in the decomissioned bpo meta tracker IIRC.) Features: