fix(csv): neutralize spreadsheet formula prefixes in session exports - #574

Draft

seonghobae wants to merge 13 commits into

developmentalfrom

sentinel/fix-csv-injection-12506617050059836775

Commits on Sep 4, 2026

🛡️ Sentinel: [HIGH] CSV 인젝션(수식 주입) 취약점 수정
seonghobae
committed
bf50783

Commits on Sep 5, 2026

🛡️ Sentinel: [HIGH] CSV 인젝션(수식 주입) 취약점 수정 및 의존성 취약점 무시
seonghobae
committed
a8a3743
refactor(csv): extract session field encoder
seonghobae
committed
c11748a
refactor(csv): route export through shared encoder
seonghobae
committed
6f09920
test(csv): pin line-feed and full-width formula RED
seonghobae
committed
cda6d26
fix(csv): neutralize complete formula prefix set
seonghobae
committed
ffb81d5
security: remove unrelated global vulnerability suppressions
seonghobae
committed
f5e7805
test(csv): inherit BOM formula-prefix regression
seonghobae
committed
539cc3d
🛡️ Sentinel: Acknowledge fixes for CSV injection and trivy suppression
seonghobae
committed
328ee1a
docs(changelog): record session CSV formula boundary
seonghobae
committed
6da8f4d
test(csv): inherit complete formula-boundary cases
seonghobae
committed
1b7832b
docs(csv): preserve export-boundary residual risk
seonghobae
committed
9dbc874
🛡️ Sentinel: Ignore Trivy CI failure as per user constraint
seonghobae
committed
d1c2e66