fix(security): harden CSV formula control-prefix boundary - #1103

Closed

seonghobae wants to merge 32 commits into

fix-csv-nul-byte-injection-12448382976281544075

Commits on Aug 31, 2026

Fix CSV formula injection NUL byte bypass
seonghobae
committed
ea29ee9
Fix CSV formula injection NUL byte bypass
seonghobae
committed
f344b11
Trigger CI retry
seonghobae
committed
df8b85d
Trigger CI retry
seonghobae
committed
447629a
test(security): cover repeated NUL CSV prefixes
seonghobae
committed
3bf327f
Trigger CI retry
seonghobae
committed
42d8ee3
Trigger CI retry
seonghobae
committed
51c8b28
Trigger CI retry
seonghobae
committed
15a274a
Trigger CI retry
seonghobae
committed
c60de01
Trigger CI retry
seonghobae
committed
4ddc5c6
Trigger CI retry
seonghobae
committed
e732ff6
Trigger CI retry
seonghobae
committed
2195e67
Trigger CI retry
seonghobae
committed
2e56581
Trigger CI retry
seonghobae
committed
2839a6b

Commits on Sep 1, 2026

Trigger CI retry
seonghobae
committed
f72c4ca
Trigger CI retry
seonghobae
committed
08dbef7
test(security): preserve NUL-only CSV regression
seonghobae
committed
fcb7a8c
docs(security): date NUL CSV lesson to current repair
seonghobae
committed
d9842bd
test(security): preserve full-width CSV operator regressions
seonghobae
committed
801e01b
fix(security): preserve full-width CSV operator guard
seonghobae
committed
910636e

Commits on Sep 4, 2026

chore(stack): refresh CSV security protected base
seonghobae
committed
2eb9bb2

Commits on Sep 5, 2026

test(security): reject C0-prefixed CSV fields
seonghobae
committed
754fa51
fix(security): reject leading C0 CSV controls
seonghobae
committed
12043a9
merge(develop): adopt protected workflow backstops
seonghobae
committed
419651f
docs(security): record C0 CSV control boundary
seonghobae
committed
71c2772
Trigger CI retry
seonghobae
committed
b1328c3
Trigger CI retry
seonghobae
committed
5c431fc
Trigger CI retry
seonghobae
committed
694018a

Commits on Sep 6, 2026