🛡️ Sentinel: CSV 수식 주입 NUL·전각 연산자 우회 차단 - #941

Closed

seonghobae wants to merge 30 commits into

fix-csv-injection-15377750598684407704

Commits on Aug 19, 2026

CSV 수식 주입(Formula Injection) 방지 로직 우회 취약점 수정 (NUL 바이트)
seonghobae
committed
a96293e
보안 취약점 패키지 업데이트 (npm audit fix)
seonghobae
committed
a8b4d50
chore(csv): restore dependency scope ownership
seonghobae
committed
35981b5
test(csv): reproduce full-width formula injection bypass
seonghobae
committed
b032325
fix(csv): block full-width formula injection operators
seonghobae
committed
bac6216
보안 취약점 패키지 업데이트 (npm audit fix) 및 pdfjs-dist 6.2 호환성 수정
seonghobae
committed
ccfe2a9
test(export): reproduce full-width CSV formula prefixes
seonghobae
committed
eb6a6d5
fix(export): block full-width spreadsheet formula prefixes
seonghobae
committed
3fed3c8
chore(export): remove competing dependency changes
seonghobae
committed
1afc85a
docs(security): record CSV prefix bypass boundary
seonghobae
committed
9b9581b
test(security): expose leading control CSV bypasses
seonghobae
committed
80e3b19
fix(security): preserve dangerous CSV control prefixes
seonghobae
committed
eea1cd1
docs(security): doctor CSV formula injection boundary
seonghobae
committed
9aaa8ab
Fix CSV Formula Injection Bypass
seonghobae
committed
3f080cb
test(security): restore direct CSV control-prefix regressions
seonghobae
committed
1108e7b
fix(security): preserve dangerous CSV control prefixes
seonghobae
committed
0b2c228
docs(security): restore CSV formula-injection traceability
seonghobae
committed
f7a2634

Commits on Aug 25, 2026

Merge branch 'develop' into fix-csv-injection-15377750598684407704
seonghobae
authored
ae4d135

Commits on Aug 26, 2026