What to build
Anyone, signed in or not, can browse the community dataset (all approved yields) on the Community page, read from the public collection. They can also download it as CSV or JSON. Each yield is attributed only by display name or "Anonymous". The page and both files carry the CC BY 4.0 notice (ADR 0004 in #122).
Values in the CSV are user-supplied, so any cell starting with =, +, - or @ is neutralized and a spreadsheet will not run it as a formula. This matches today's server export.
A stable download address for other tools comes later with versioned releases; it is not part of this slice.
Acceptance criteria
Blocked by
What to build
Anyone, signed in or not, can browse the community dataset (all approved yields) on the Community page, read from the public collection. They can also download it as CSV or JSON. Each yield is attributed only by display name or "Anonymous". The page and both files carry the CC BY 4.0 notice (ADR 0004 in #122).
Values in the CSV are user-supplied, so any cell starting with
=,+,-or@is neutralized and a spreadsheet will not run it as a formula. This matches today's server export.A stable download address for other tools comes later with versioned releases; it is not part of this slice.
Acceptance criteria
=,+,-or@are neutralized, with the current regression test portedlicensefield in the JSONBlocked by