defusedcsv_csv_injection_prevention_with_dangerous_cell_escaping.py

1import defusedcsv as csv
2import io
3
4# Example data containing a potential CSV injection payload
5data = [
6    ['Name', 'Score', 'Comment'],
7    ['Alice', '100', 'Great job!'],
8    ['Bob', '90', '=SUM(B2:B3)'],  # Dangerous payload starting with '='
9]
10
11# Writing to a CSV (defusedcsv automatically escapes the dangerous payload)
12output = io.StringIO()
13writer = csv.writer(output)
14writer.writerows(data)
15
16# Show the escaped output
17print(output.getvalue())