fix: sanitize user data while generating csv to avoid formula injection

Signed-off-by: Pranav C <pranavxc@gmail.com>

packages/nocodb/src/lib/dataMapper/lib/sql/BaseModelSql.ts

@@ -2556,7 +2556,8 @@ class BaseModelSql extends BaseModel {
       }
     }
 
-    const data = Papaparse.unparse({
+    const data = Papaparse.unparse(
+      {
         fields:
           fields &&
           fields.filter(
@@ -2565,7 +2566,11 @@ class BaseModelSql extends BaseModel {
               this.virtualColumns.some(c => c._cn === f)
           ),
         data: csvRows
-    });
+      },
+      {
+        escapeFormulae: true
+      }
+    );
     return { data, offset, elapsed };
   }