diff --git a/doc/faq.rst b/doc/faq.rst index 07746f8742..f572865c10 100644 --- a/doc/faq.rst +++ b/doc/faq.rst @@ -2181,7 +2181,7 @@ This is a server configuration problem. Never enable ``display_errors`` on a pro ------------------------------------------------------------------------------ It is possible to generate a :term:`CSV` file that, when imported to a spreadsheet program such as Microsoft Excel, -could potentially allow the execution of arbitrary commands. +could potentially allow the execution of arbitrary commands. The CSV files generated by phpMyAdmin could potentially contain text that would be interpreted by a spreadsheet program as a formula, but we do not believe escaping those fields is the proper behavior. There is no means to properly escape and @@ -2189,7 +2189,7 @@ differentiate between a desired text output and a formula that should be escaped definitions should not be interpreted anyway. We have discussed this at length and feel it is the responsibility of the spreadsheet program to properly parse and sanitize such data on input instead. -Google also has a `similar view `. +Google also has a `similar view `_. .. _faqsynchronization: