Prevent CSV Injection when suing user generated data

csv_generated_string_escape.py

def escape_csv(user_generated_string):
	""" 
	CSV injection esacaping for Python. Excel treats a string as active content when it encounters a 
	"trigger" character at the start of the string. This method returns the string with 
	the triger character escaped.
	"""

	if user_generated_string[0] in ('@','+','-', '='):
		user_generated_string = "'" + user_generated_string
	return user_generated_string

# Example
user_generated_string = '@bob'
print escape_csv(user_generated_string)