It&#x27;s not going to -stay- in a google spreadsheet, though. You have to assume it will get loaded into some other system. there are opportunities to exploit <i>that</i> system, potentially.  Kind of a &#x27;stored&#x27; injection vulnerability.