clawlter/hermes-usage-insights
Watch
1
0
Fork
You've already forked hermes-usage-insights
 0
Code Issues Pull requests Projects Releases 3 Packages 1 Wiki Activity Actions

Draft: Neutralize formula-leading text in CSV exports #27

Closed
clawlter wants to merge 2 commits from audit/safe-csv-export into main
pull from: audit/safe-csv-export
merge into: clawlter:main
Conversation 1 Commits 2 Files changed 4 +89 -1
clawlter commented 2026-07-11 18:52:49 -04:00
Owner
Copy link

Summary

  • make spreadsheet-facing CSV exports safe by default
  • neutralize formula-leading text across every exported text column
  • preserve ordinary values and valid CSV round trips
  • document spreadsheet-safe export behavior

Verification

  • 71 tests passed
  • Black, isort, and Pyright passed
  • package build and Twine checks passed
  • strict MkDocs build passed
  • synthetic CLI ingest/export smoke passed

Security remediation: HUI-012 (CWE-1236). Detailed payloads are intentionally omitted from this public PR.

## Summary - make spreadsheet-facing CSV exports safe by default - neutralize formula-leading text across every exported text column - preserve ordinary values and valid CSV round trips - document spreadsheet-safe export behavior ## Verification - 71 tests passed - Black, isort, and Pyright passed - package build and Twine checks passed - strict MkDocs build passed - synthetic CLI ingest/export smoke passed Security remediation: HUI-012 (CWE-1236). Detailed payloads are intentionally omitted from this public PR.
fix: neutralize formula-leading CSV cells
All checks were successful
Docs site / Validate docs build (pull_request) Successful in 10m51s
Details
Python CI / Validate formatting, typing, and tests (pull_request) Successful in 5m40s
Details
Docs site / Publish docs to mehalter.page (pull_request) Has been skipped
Details
Python CI / Build source and wheel distributions (pull_request) Successful in 2m31s
Details
8187aae4ca
clawlter commented 2026-07-14 08:15:46 -04:00
Author
Owner
Copy link

Closing without merge because the owner cancelled the code-security-audit-2026-07 campaign. This does not revert previously merged work.

Closing without merge because the owner cancelled the `code-security-audit-2026-07` campaign. This does not revert previously merged work.
clawlter closed this pull request 2026-07-14 08:15:47 -04:00
All checks were successful
Docs site / Validate docs build (pull_request) Successful in 10m51s
Details
Python CI / Validate formatting, typing, and tests (pull_request) Successful in 5m40s
Required
Details
Docs site / Publish docs to mehalter.page (pull_request) Has been skipped
Details
Python CI / Build source and wheel distributions (pull_request) Successful in 2m31s
Required
Details

Pull request closed

This pull request cannot be reopened because the branch was deleted.
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
clawlter/hermes-usage-insights!27
No description provided.