A Single Quote is Prepended to Every String Field in the User Export CSV File

[lihua.zhang]

Problem statement:

In the user export CSV file, a single quote is prepended to every string field. This happens only with the CSV export, not the JSON export file.

Cause of this observation:

In April 2022, Auth0 product team implemented this change for the following reason:

The CSV encoding is compliant with OWASP recommendations to avoid CSV injection exploits. Before the change, Users could sign up with characters in attributes that can trigger formulas in excel or other spreadsheets. That’s why we implemented this security measure.

And we have updated our doc with the below details:

References:

https://auth0.com/docs/manage-users/user-migration/bulk-user-exports

How to Generate a Bulk Users Export CSV File From the Management API?

Problem statement: Bulk export user details in CSV format using the Auth0 Management API UI and from Postman. Solution: Get the connection_id and domain of the tenant from the Auth0 dashboard Put them in the body script. Here is a short sample. { "connection_id": "connection_id", "format": "csv", "limit": 20, "fields": [{ "name": "user_id" }, { "name": "email" }, { "name": "user_metadata.country" } ] } Open Auth0 Management API https://auth0.com/docs/api/management/v2 UI or Postman Get th…