yyqdbngt opened a new pull request, #3427:
URL: https://github.com/apache/rocketmq-dashboard/pull/3427

   ### Summary
   
   `CsvUtil` quotes every cell and neutralizes spreadsheet formula injection by 
prefixing cells that start with `= + - @ \t \r \n`. The suite covered `=`/`+` 
and embedded quotes only.
   
   ### Changes
   
   - `-`, `@`, tab, CR and LF leading characters are all neutralized with the 
single-quote prefix
   - Empty and plain (including space-padded) values are quoted unchanged
   - A row with no values emits just the CRLF terminator
   - Consecutive `appendRow` calls build a multi-line CSV
   
   ### Testing
   
   `mvn test -Dtest=CsvUtilTest` passes: 6 tests, 0 failures (up from 2).


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to