The following table lists the device information settings for rendering in CSV format.
The delimiter string to put in the result. The default value is a comma (,).
Indicates whether the header row is excluded from the output. The default value is false.
Indicates whether static text is excluded from the output. From Telerik Reporting point of view a TextBox item which value is a string that does not start with = is considered static; otherwise it is evaluated as an expression. The default value is false.
The qualifier string to put around results that contain the field delimiter. If the results contain the qualifier, the qualifier is repeated. The Qualifier setting must be different from the FieldDelimiter setting. The default value is a quotation mark (").
When the exported CSV file is to be opened in a spreadsheet application (Microsoft Excel, Google Sheets, etc.), it is recommended to escape CSV values with a prefix in order to prevent the spreadsheet application from automatically executing malicious formula injection attacks. The recommended formula prefix string which is not visually present in spreadsheet applications is the tab character "\t". Other popular prefix strings are "'", "\", "".
The default value is an empty string and the default behavior is to keep the original CSV data intact. This option is very useful when the exported CSV file will be read by a non-spreadsheet application and there is no risk of formula injection attacks.
Besides formula injection attacks the prefix will also prevent automatic execution of CSV values which incidentally resemble a spreadsheet formula. For example:
The CSV value above will be visualised as "2" when the CSV file is opened in Excel. A formula prefix, such as an apostrophe "'", will prevent this behavior and display:
For an example of how to set up the settings for a rendering extension, see extensions Element.