Excel Injection via Rails downloads - Ruby on Rails Security Project

Excel Injection via Rails downloads and a growing number of other Ruby on Rails security topics. A = in a name could make Excel run. Excel injection occurs when a CSV or Excel file is crafted to contain control characters in a cell which run a command when the file is opened. When a cell starts with =, , or – in a string field, Excel can be made to launch executable files or visit a webpage.