escaped-csv

Just needed a tiny, no-dependencies CSV generator that works in node and the browser.

It takes an array of array of strings, numbers, and or Date objects and then spits out a CSV string with any string values escaped and thereby protected (hopefully) from any type of CSV injection attack (see: https://owasp.org/www-community/attacks/CSV_Injection and: http://georgemauer.net/2017/10/07/csv-injection.html).

installation

npm install escaped-csv

example

const { toCSVString, toCSVDataURI } = require('escaped-csv')

const data = [
  // row one
  ['a', new Date(), 4.75],
  // row two, etc.,
]

const csvString = toCSVString(data)
console.log(csvString)
// "a","2020-01-01T00:00:00.000Z","4.75"

const csvDataURI = toCSVDataURI([['hi', 'there']])
console.log(csvDataURI)
// 'data:text/csv;charset=utf-8,%22hi%22%2C%22there%22'

If you want to generate CSV clientside in JS, you can use the toCSVDataURI function to generate a data URI that you can then use to download the CSV file.

const encodedUri = toCSVDataURI(DATA)
const link = document.createElement('a')
link.setAttribute('href', encodedUri)
link.setAttribute('download', 'my_data.csv')
link.click()

Running tests

npm test

Change log

• 1.0.2: Fix bug with cell escaping.
• 1.0.1: Fix typo'ed package name in package.json
• 1.0.0: First published release

license

MIT