hard20 pts · first answer countstest-designsecurity-testingtest-data

A name that runs in Excel

Admins export users to CSV and open it in Excel. A user sets their name to =HYPERLINK("http://evil.example","Click"). What risk does this test reveal?

A.SQL injection in the export queryB.Cross-site scripting on the profile pageC.CSV formula injection when the file is openedD.A buffer overflow in the CSV writer

Discussion 0

Join free to post in the discussion.

A name that runs in Excel

Discussion 0

Related questions