Check CSV cells before opening them in a spreadsheet.

Choose a small comma-delimited CSV or paste text. The checker reports common ASCII and full-width formula markers, plus leading tab or line-break controls. Everything runs in this browser tab.

Check a CSV

Your data stays in this browser tab. Nothing is uploaded.
Data records—
Flagged cells—

Flagged locations

Why these cells are flagged: spreadsheet programs can interpret formula-like values when a CSV is opened. This conservative check also flags ordinary negative numbers such as -10; review context before changing data. It recognizes = + - @, the full-width forms = + - @, and a leading tab, carriage return or line feed.

Limits: 5 MB, 10,000 data records, 100 columns and comma-delimited CSV only. This tool reports locations and short previews. It does not change the source, create a sanitized file, execute formulas, prove exploitability or replace a security review. Spreadsheet products differ, and quoting alone may not remain protective after a file is saved and reopened.

References: OWASP CSV Injection describes formula-start characters, separator boundaries and spreadsheet-specific trade-offs. MITRE CWE-1236 documents improper neutralization of formula elements in CSV output.

Need a separate cleaned file?

CSV Desk can optionally make formula-like cells inert, then export a separate UTF-8 BOM CSV and JSON change report. The fixed-scope service is available when rules need agreement first.

Buy CSV Desk for $9 Read the prevention guide Request the fixed $12 formula-safety service Review the $25 custom cleanup service Support this free checker

Optional support is not a CSV Desk purchase or a service order.