Upstream contribution · debpalash/OpenGTM
OpenGTM · Encode untrusted lead data for spreadsheet exports
Problem
OpenGTM's API and CLI wrote scraped lead strings into CSV. Spreadsheet programs can treat values beginning with formula markers as executable formulas when a user opens the export.
Engineering response
Apply the same string-escaping policy across both lead export paths. Preserve numeric values and restricted phone-like strings while neutralizing formula prefixes.
Evidence and scope
The pull request reports regressions for the API route, CLI path and string cases, plus 44 passing related tests. That evidence covers export encoding behavior.