CSV-Safe gem < 3.0.0 doesn't filter out special characters which could trigger CSV Injection.Referenceshttps://github.com/zvory/csv-safe/issues/7https://github.com/zvory/csv-safe/pull/8https://github.com/zvory/csv-safe
