Skip to content

40 files changed

+220
-26
lines changed

demo/browser/CHANGELOG.md

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -3,6 +3,14 @@
33
All notable changes to this project will be documented in this file.
44
See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
55

6+
## [0.1.10](https://github.com/adaltas/node-csv/compare/[email protected]@0.1.10) (2023-05-09)
7+
8+
**Note:** Version bump only for package csv-demo-browser
9+
10+
11+
12+
13+
614
## [0.1.9](https://github.com/adaltas/node-csv/compare/[email protected]@0.1.9) (2023-05-04)
715

816
**Note:** Version bump only for package csv-demo-browser

demo/browser/package.json

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
{
22
"name": "csv-demo-browser",
3-
"version": "0.1.9",
3+
"version": "0.1.10",
44
"main": "index.js",
55
"license": "MIT",
66
"type": "module",
@@ -20,10 +20,10 @@
2020
"start": "node server.js"
2121
},
2222
"dependencies": {
23-
"csv": "^6.2.12",
23+
"csv": "^6.3.0",
2424
"csv-generate": "^4.2.6",
2525
"csv-parse": "^5.3.10",
26-
"csv-stringify": "^6.3.4",
26+
"csv-stringify": "^6.4.0",
2727
"express": "^4.18.2",
2828
"stream-transform": "^3.2.6"
2929
}

demo/cjs/CHANGELOG.md

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -3,6 +3,14 @@
33
All notable changes to this project will be documented in this file.
44
See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
55

6+
## [0.2.8](https://github.com/adaltas/node-csv/compare/[email protected]@0.2.8) (2023-05-09)
7+
8+
**Note:** Version bump only for package csv-demo-cjs
9+
10+
11+
12+
13+
614
## [0.2.7](https://github.com/adaltas/node-csv/compare/[email protected]@0.2.7) (2023-05-04)
715

816
**Note:** Version bump only for package csv-demo-cjs

demo/cjs/package.json

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,14 +1,14 @@
11
{
22
"name": "csv-demo-cjs",
3-
"version": "0.2.7",
3+
"version": "0.2.8",
44
"main": "index.js",
55
"license": "MIT",
66
"type": "commonjs",
77
"private": true,
88
"dependencies": {
9-
"csv": "^6.2.12",
9+
"csv": "^6.3.0",
1010
"csv-parse": "^5.3.10",
11-
"csv-stringify": "^6.3.4"
11+
"csv-stringify": "^6.4.0"
1212
},
1313
"devDependencies": {
1414
"@types/node": "^18.15.3",

demo/eslint/CHANGELOG.md

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -3,6 +3,14 @@
33
All notable changes to this project will be documented in this file.
44
See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
55

6+
## [0.1.14](https://github.com/adaltas/node-csv/compare/[email protected]@0.1.14) (2023-05-09)
7+
8+
**Note:** Version bump only for package csv-demo-eslint
9+
10+
11+
12+
13+
614
## [0.1.13](https://github.com/adaltas/node-csv/compare/[email protected]@0.1.13) (2023-05-04)
715

816
**Note:** Version bump only for package csv-demo-eslint

demo/eslint/package.json

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
{
22
"name": "csv-demo-eslint",
3-
"version": "0.1.13",
3+
"version": "0.1.14",
44
"description": "",
55
"main": "index.js",
66
"private": true,
@@ -10,7 +10,7 @@
1010
},
1111
"license": "MIT",
1212
"dependencies": {
13-
"csv-stringify": "^6.3.4"
13+
"csv-stringify": "^6.4.0"
1414
},
1515
"devDependencies": {
1616
"eslint": "^8.36.0",

demo/esm/CHANGELOG.md

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -3,6 +3,14 @@
33
All notable changes to this project will be documented in this file.
44
See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
55

6+
## [0.0.22](https://github.com/adaltas/node-csv/compare/[email protected]@0.0.22) (2023-05-09)
7+
8+
**Note:** Version bump only for package csv-demo-esm
9+
10+
11+
12+
13+
614
## [0.0.21](https://github.com/adaltas/node-csv/compare/[email protected]@0.0.21) (2023-05-04)
715

816
**Note:** Version bump only for package csv-demo-esm

demo/esm/package.json

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,12 +1,12 @@
11
{
22
"name": "csv-demo-esm",
3-
"version": "0.0.21",
3+
"version": "0.0.22",
44
"main": "index.js",
55
"license": "MIT",
66
"type": "module",
77
"private": true,
88
"dependencies": {
9-
"csv": "^6.2.12",
9+
"csv": "^6.3.0",
1010
"csv-parse": "^5.3.10"
1111
},
1212
"devDependencies": {

demo/issues-cjs/CHANGELOG.md

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -3,6 +3,14 @@
33
All notable changes to this project will be documented in this file.
44
See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
55

6+
## [0.1.9](https://github.com/adaltas/node-csv/compare/[email protected]@0.1.9) (2023-05-09)
7+
8+
**Note:** Version bump only for package csv-issues-cjs
9+
10+
11+
12+
13+
614
## [0.1.8](https://github.com/adaltas/node-csv/compare/[email protected]@0.1.8) (2023-05-04)
715

816
**Note:** Version bump only for package csv-issues-cjs

demo/issues-cjs/package.json

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,12 +1,12 @@
11
{
22
"name": "csv-issues-cjs",
3-
"version": "0.1.8",
3+
"version": "0.1.9",
44
"main": "index.js",
55
"license": "MIT",
66
"private": true,
77
"dependencies": {
88
"csv-parse": "^5.3.10",
9-
"csv-stringify": "^6.3.4"
9+
"csv-stringify": "^6.4.0"
1010
},
1111
"devDependencies": {
1212
"coffeescript": "^2.7.0",

demo/issues-esm/CHANGELOG.md

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -3,6 +3,14 @@
33
All notable changes to this project will be documented in this file.
44
See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
55

6+
## [0.0.13](https://github.com/adaltas/node-csv/compare/[email protected]@0.0.13) (2023-05-09)
7+
8+
**Note:** Version bump only for package csv-issues-esm
9+
10+
11+
12+
13+
614
## [0.0.12](https://github.com/adaltas/node-csv/compare/[email protected]@0.0.12) (2023-05-04)
715

816
**Note:** Version bump only for package csv-issues-esm

demo/issues-esm/package.json

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
{
22
"name": "csv-issues-esm",
3-
"version": "0.0.12",
3+
"version": "0.0.13",
44
"main": "index.js",
55
"license": "MIT",
66
"type": "module",
@@ -28,7 +28,7 @@
2828
"dependencies": {
2929
"csv-generate": "^4.2.6",
3030
"csv-parse": "^5.3.10",
31-
"csv-stringify": "^6.3.4",
31+
"csv-stringify": "^6.4.0",
3232
"desm": "^1.3.0"
3333
}
3434
}

demo/ts-cjs-node16/CHANGELOG.md

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -3,6 +3,14 @@
33
All notable changes to this project will be documented in this file.
44
See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
55

6+
## [0.2.8](https://github.com/adaltas/node-csv/compare/csv-demo-ts-moduleresolution-node16-cjs@[email protected]) (2023-05-09)
7+
8+
**Note:** Version bump only for package csv-demo-ts-moduleresolution-node16-cjs
9+
10+
11+
12+
13+
614
## [0.2.7](https://github.com/adaltas/node-csv/compare/csv-demo-ts-moduleresolution-node16-cjs@[email protected]) (2023-05-04)
715

816
**Note:** Version bump only for package csv-demo-ts-moduleresolution-node16-cjs

demo/ts-cjs-node16/package.json

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,10 +1,10 @@
11
{
22
"name": "csv-demo-ts-moduleresolution-node16-cjs",
3-
"version": "0.2.7",
3+
"version": "0.2.8",
44
"dependencies": {
55
"csv-generate": "^4.2.6",
66
"csv-parse": "^5.3.10",
7-
"csv-stringify": "^6.3.4",
7+
"csv-stringify": "^6.4.0",
88
"stream-transform": "^3.2.6"
99
},
1010
"main": "index.js",

demo/ts-esm-node16/CHANGELOG.md

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -3,6 +3,14 @@
33
All notable changes to this project will be documented in this file.
44
See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
55

6+
## [0.2.8](https://github.com/adaltas/node-csv/compare/[email protected]@0.2.8) (2023-05-09)
7+
8+
**Note:** Version bump only for package csv-demo-ts-module-node16
9+
10+
11+
12+
13+
614
## [0.2.7](https://github.com/adaltas/node-csv/compare/[email protected]@0.2.7) (2023-05-04)
715

816
**Note:** Version bump only for package csv-demo-ts-module-node16

demo/ts-esm-node16/package.json

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,14 +1,14 @@
11
{
22
"name": "csv-demo-ts-module-node16",
3-
"version": "0.2.7",
3+
"version": "0.2.8",
44
"main": "index.js",
55
"license": "MIT",
66
"type": "module",
77
"private": true,
88
"dependencies": {
99
"csv-generate": "^4.2.6",
1010
"csv-parse": "^5.3.10",
11-
"csv-stringify": "^6.3.4",
11+
"csv-stringify": "^6.4.0",
1212
"stream-transform": "^3.2.6"
1313
},
1414
"devDependencies": {

demo/webpack-ts/CHANGELOG.md

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -3,6 +3,14 @@
33
All notable changes to this project will be documented in this file.
44
See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
55

6+
## [0.1.10](https://github.com/adaltas/node-csv/compare/[email protected]@0.1.10) (2023-05-09)
7+
8+
**Note:** Version bump only for package csv-demo-webpack-ts
9+
10+
11+
12+
13+
614
## [0.1.9](https://github.com/adaltas/node-csv/compare/[email protected]@0.1.9) (2023-05-04)
715

816
**Note:** Version bump only for package csv-demo-webpack-ts

demo/webpack-ts/package.json

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
{
22
"name": "csv-demo-webpack-ts",
3-
"version": "0.1.9",
3+
"version": "0.1.10",
44
"description": "",
55
"private": true,
66
"keywords": [],
@@ -9,7 +9,7 @@
99
"dependencies": {
1010
"csv-generate": "^4.2.6",
1111
"csv-parse": "^5.3.10",
12-
"csv-stringify": "^6.3.4",
12+
"csv-stringify": "^6.4.0",
1313
"http-server": "^14.1.1",
1414
"stream-transform": "^3.2.6"
1515
},

demo/webpack/CHANGELOG.md

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -3,6 +3,14 @@
33
All notable changes to this project will be documented in this file.
44
See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
55

6+
## [0.1.12](https://github.com/adaltas/node-csv/compare/[email protected]@0.1.12) (2023-05-09)
7+
8+
**Note:** Version bump only for package csv-demo-webpack
9+
10+
11+
12+
13+
614
## [0.1.11](https://github.com/adaltas/node-csv/compare/[email protected]@0.1.11) (2023-05-04)
715

816
**Note:** Version bump only for package csv-demo-webpack

demo/webpack/package.json

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
{
22
"name": "csv-demo-webpack",
3-
"version": "0.1.11",
3+
"version": "0.1.12",
44
"description": "",
55
"private": true,
66
"scripts": {
@@ -16,10 +16,10 @@
1616
"webpack-cli": "^5.0.1"
1717
},
1818
"dependencies": {
19-
"csv": "^6.2.12",
19+
"csv": "^6.3.0",
2020
"csv-generate": "^4.2.6",
2121
"csv-parse": "^5.3.10",
22-
"csv-stringify": "^6.3.4",
22+
"csv-stringify": "^6.4.0",
2323
"http-server": "^14.1.1",
2424
"stream-browserify": "^3.0.0",
2525
"stream-transform": "^3.2.6"

packages/csv-stringify/CHANGELOG.md

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -3,6 +3,15 @@
33
All notable changes to this project will be documented in this file.
44
See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
55

6+
## [6.4.0](https://github.com/adaltas/node-csv/compare/[email protected]@6.4.0) (2023-05-09)
7+
8+
9+
### Features
10+
11+
* add unicode chars to formula escape ([#387](https://github.com/adaltas/node-csv/issues/387)) ([1fc177c](https://github.com/adaltas/node-csv/commit/1fc177c605e8a88e403539806890695a6ba72dec))
12+
13+
14+
615
## [6.3.4](https://github.com/adaltas/node-csv/compare/[email protected]@6.3.4) (2023-05-04)
716

817
**Note:** Version bump only for package csv-stringify

packages/csv-stringify/dist/cjs/index.cjs

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -475,6 +475,12 @@ const stringifier = function(options, state, info){
475475
}
476476
});
477477
quotedMatch = quotedMatch && quotedMatch.length > 0;
478+
// See https://github.com/adaltas/node-csv/pull/387
479+
// More about CSV injection or formula injection, when websites embed
480+
// untrusted input inside CSV files:
481+
// https://owasp.org/www-community/attacks/CSV_Injection
482+
// http://georgemauer.net/2017/10/07/csv-injection.html
483+
// Apple Numbers unicode normalization is empirical from testing
478484
if (escape_formulas) {
479485
switch (value[0]) {
480486
case '=':

packages/csv-stringify/dist/cjs/sync.cjs

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -473,6 +473,12 @@ const stringifier = function(options, state, info){
473473
}
474474
});
475475
quotedMatch = quotedMatch && quotedMatch.length > 0;
476+
// See https://github.com/adaltas/node-csv/pull/387
477+
// More about CSV injection or formula injection, when websites embed
478+
// untrusted input inside CSV files:
479+
// https://owasp.org/www-community/attacks/CSV_Injection
480+
// http://georgemauer.net/2017/10/07/csv-injection.html
481+
// Apple Numbers unicode normalization is empirical from testing
476482
if (escape_formulas) {
477483
switch (value[0]) {
478484
case '=':

packages/csv-stringify/dist/esm/index.js

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -5533,6 +5533,12 @@ const stringifier = function(options, state, info){
55335533
}
55345534
});
55355535
quotedMatch = quotedMatch && quotedMatch.length > 0;
5536+
// See https://github.com/adaltas/node-csv/pull/387
5537+
// More about CSV injection or formula injection, when websites embed
5538+
// untrusted input inside CSV files:
5539+
// https://owasp.org/www-community/attacks/CSV_Injection
5540+
// http://georgemauer.net/2017/10/07/csv-injection.html
5541+
// Apple Numbers unicode normalization is empirical from testing
55365542
if (escape_formulas) {
55375543
switch (value[0]) {
55385544
case '=':

packages/csv-stringify/dist/esm/sync.js

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2443,6 +2443,12 @@ const stringifier = function(options, state, info){
24432443
}
24442444
});
24452445
quotedMatch = quotedMatch && quotedMatch.length > 0;
2446+
// See https://github.com/adaltas/node-csv/pull/387
2447+
// More about CSV injection or formula injection, when websites embed
2448+
// untrusted input inside CSV files:
2449+
// https://owasp.org/www-community/attacks/CSV_Injection
2450+
// http://georgemauer.net/2017/10/07/csv-injection.html
2451+
// Apple Numbers unicode normalization is empirical from testing
24462452
if (escape_formulas) {
24472453
switch (value[0]) {
24482454
case '=':

0 commit comments

Comments
 (0)