← Back to Baseline

MB-R276

HUMAN VERIFICATION REQUIRED ASVS 1.2.10 CSV and formula injection

MB-C18 ASVS Level 3 Human Assurance Medium

The application is protected against CSV and Formula Injection. The application must follow the escaping rules defined in RFC 4180 sections 2.6 and 2.7 when exporting CSV content. Additionally, when exporting to CSV or other spreadsheet formats (such as XLS, XLSX, or ODF), special characters (including '=', '+', '-', '@', '\\t'(tab), and '\\0'(null character)) must be escaped with a single quote if they appear as the first character in a field value.