you are viewing a single comment's thread
view the rest of the comments
[–] 51 points 1 year ago (5 children)

Sadly, no. CSV files can deal with embedded commas via quoting or escaping. Given that most of the dumps are going to be put together and consumed via common libraries (e.g.python's csv module), that's all going to happen automagically.

  • source
  • hideshow 5 child comments
  • [–] 11 points 1 year ago (2 children)

    What about quotes (single/double) and \s mixed with commas?

  • source
  • parent
  • hideshow 2 child comments
  • [–] 14 points 1 year ago (1 child)

    Everything you can use for a password can be escaped out of a csv. Partially because csvs have to be interoperable with databases for a bunch of different reasons, and databases are where your passwords are stored (though ideally not in plaintext). There's no way that I can think of to poison your password for a data breach that wouldn't also poison the password database for the service you're trying to log into.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 4 points 1 year ago

    Gotcha, that's what I was thinking as well. I haven't done any software development in a long time (I have a degree in it, but professional career sent me down another path in tech), so my memory on input sanitization is very rusty. Thanks for the response!

  • source
  • parent