v5.0.be-5.3.11 / 1.2.9 - csv and formula injection wording

[elarlang]

spin-off from #2554, initially developed in #1469

From

#	Description	Level	#v5.0.be
1.2.9	[ADDED] Verify that the application is protected against CSV and Formula Injection. The application should follow the escaping rules defined in RFC4180 2.6 and 2.7 when exporting CSV files. The application should escape special characters including '=', '+', '-', '@' '\t' (tab) and '\00' (null character) using a single quote, if they are the first character in a field, when exporting CSV files and other spreadsheet formats such as xls, xlsx, odf.	3	v5.0.be-5.3.11

Proposed in #2810

#	Description	Level	#v5.0.be
1.2.9	[ADDED] Verify that the application is protected against CSV and Formula Injection. The application must follow the escaping rules defined in RFC4180 2.6 and 2.7 when exporting CSV files. When exporting CSV files and other spreadsheet formats such as xls, xlsx, or odf, the application must also escape special characters including '=', '+', '-', '@' '\t' (tab) and '\00' (null character) using a single quote, if they are the first character in a field.	3	v5.0.be-5.3.11

I think here are overlap that can be avoided

The application must follow the escaping rules defined in RFC4180 2.6 and 2.7 when exporting CSV files.

vs

When exporting CSV files and other spreadsheet formats such as xls, xlsx, or odf, the application must also escape

edit: terminology question - it is not about exporting CSV files, it is building a CSV or spreadsheet content. What happens with the content, it is out of scope for this issue.

Attempt for proposal:

Verify that the application is protected against CSV and Formula Injection. The application must follow the escaping rules defined in RFC4180 2.6 and 2.7 when exporting CSV content. Additionally, in case exporting for other spreadsheet formats (such as xls, xlsx, or odf), special characters must be escaped (including '=', '+', '-', '@' '\t' (tab) and '\00' (null character)) using a single quote, if they are the first character in a field value.

[tghosth]

Suggest:

"Verify that the application is protected against CSV and Formula Injection. The application must follow the escaping rules defined in RFC4180 2.6 and 2.7 when exporting CSV content. Additionally, when exporting to CSV or other spreadsheet formats (such as xls, xlsx, or odf), special characters (including '=', '+', '-', '@' '\t' (tab) and '\00' (null character)) must be escaped using a single quote, if they are the first character in a field value."

The special character escaping also needs to happen for CSV

[elarlang]

ack, update the PR