import csv "github.com/samber/go-safe-csv-writer"
func main() {
    var buff strings.Builder
    // OWASP-compliant mode (recommended)
    writer := csv.NewSafeWriter(&buff, csv.OWASPSafe)
    writer.Write([]string{"userId", "secret", "comment"})
    writer.Write([]string{"-21+63", "=A1", "foo, bar"})
    writer.Flush()
    if err := writer.Error(); err != nil {
        panic(err)
    }
    output := buff.String()
    // "userId","secret","comment"
    // "'-21+63","'=A1","foo, bar"
}

writer := csv.NewSafeWriter(
    &buff,
    csv.SafetyOpts{
        ForceDoubleQuotes: true,
        EscapeCharEqual:   true,
    },
)

// Prototype:
func NewSafeWriter(w io.Writer, opts SafetyOpts) *SafeWriter

// Available options:
type SafetyOpts struct {
    ForceDoubleQuotes bool
    EscapeCharEqual   bool
    EscapeCharPlus    bool
    EscapeCharMinus   bool
    EscapeCharAt      bool
    EscapeCharTab     bool
    EscapeCharCR      bool // Escapes 0x0D (Carriage Return, '\r')
    EscapeCharLF      bool // Escapes 0x0A (Line Feed, '\n')
    PrependSingleQuote bool // Prepend single quote to dangerous fields only
}

// Presets:
// OWASPSafe provides OWASP-compliant CSV injection prevention.
// It wraps all fields in double quotes and prepends a single quote
// to fields that contain dangerous characters or bypass patterns.
// See https://owasp.org/www-community/attacks/CSV_Injection
var OWASPSafe = SafetyOpts{
	ForceDoubleQuotes: true,
	PrependSingleQuote: true,
}
var FullSafety = SafetyOpts{
	ForceDoubleQuotes: true,
	EscapeCharEqual:   true,
	EscapeCharPlus:    true,
	EscapeCharMinus:   true,
	EscapeCharAt:      true,
	EscapeCharTab:     true,
	EscapeCharCR:      true,
	EscapeCharLF:      true,
	PrependSingleQuote: false,
}
var EscapeAll = SafetyOpts{
	ForceDoubleQuotes: false,
	EscapeCharEqual:   true,
	EscapeCharPlus:    true,
	EscapeCharMinus:   true,
	EscapeCharAt:      true,
	EscapeCharTab:     true,
	EscapeCharCR:      true,
	EscapeCharLF:      true,
	PrependSingleQuote: false,
}