diff --git a/core/DataTable/Renderer/Csv.php b/core/DataTable/Renderer/Csv.php
index <HASH>..<HASH> 100644
--- a/core/DataTable/Renderer/Csv.php
+++ b/core/DataTable/Renderer/Csv.php
@@ -239,6 +239,8 @@ class Csv extends Renderer
 
         $value = $this->formatFormulas($value);
 
+        $value = str_replace(["\t"], ' ', $value);
+
         if (is_string($value)
             && (strpos($value, '"') !== false
                 || strpos($value, $this->separator) !== false)
Improve the sanitization of request parameters (#<I>)

* Improve the sanitization of request parameters by replacing tab characters with spaces



* Adjust scope of value sanitization



* Fix commented line mistake