CSV Formula-Injection Sanitizer
Defensively neutralize cells that could execute as formulas when your CSV is opened in Excel or Sheets.
⚡ 99 points per successful run · Balance: 0 · Buy points
CSV Input
Paste CSV text, or upload a .csv file.
Sanitization Report
How to Use
This is a defensive tool, not an exploit tool. CSV formula injection is a real, well-known vulnerability class (CWE-1236): if any cell value starts with =, +, -, or @, some spreadsheet applications (Excel, Google Sheets, LibreOffice Calc) will evaluate it as a formula the moment the CSV is opened — rather than displaying it as plain text — which attackers can abuse for things like =cmd|'/c calc'!A1-style command execution or data-exfiltration formulas. This tool scans every cell in your CSV and, for any cell whose first meaningful character is one of those four, prepends a single leading apostrophe (') — the standard technique that forces spreadsheet apps to treat the cell as literal text. Ordinary negative numbers like -42 or -3.14 are correctly left untouched. Every change is shown in the before/after table above, and you can download the sanitized file.