Cwa-documentation: Deactivate emojis, etc. for Rapid Test Profile

[Ein-Tim]

Avoid duplicates

• [X] Bug is not mentioned in the FAQ
• [ ] Bug is specific for iOS only, for general issues / questions that apply to iOS and Android please raise them in the documentation repository
• [X] Bug is not already reported in another issue

Technical details

• Device name: iPhone 12 Emulator
• iOS version: 14.5
• App version: 2.2.0 (9)

Describe the bug

You can enter emojis into the following fields:

• "First Name"
• "Last Name"
• "Street and House Number"
• "City"
• "E-Mail Adress"

Steps to reproduce the issue

1. Open the Corona-Warn-App
2. Click on "Next Steps"
3. Click on "Create Rapid Test Profile"
4. Enter Emojis or other special letters (§, %, etc.) into the fields mentioned above

Expected behaviour

You can only enter "normal" characters into the fields.

Possible Fix

Validate the input.

Additional context

I think that this is a priority issue since the Luca app got recently "shitstormed" for the option to enter any characters into the address field during their register process, so to prevent bad PR for this new feature I suggest to fix this ASAP.

---

Internal Tracking ID: EXPOSUREAPP-7147

[Ein-Tim]

Could someone check this under Android? (@fynngodau, @MikeMcC399)

[fynngodau]

@Ein-Tim It is possible to enter emojis with Android.

However, since this is data that is being shown only to the testing center, where they will manually have a look at it, it doesn't seem as important to me. In specific, your name needs to match the name on your passport.

[Ein-Tim]

@fynngodau Thanks!

I understand that this has a different scope than f.e. the Luca thing, still it could make bad PR and this could be avoided by just adding a validation to the input fields.

However, I'll remove the "PRIO?" from the title, since it should be enough to deliver this fix in a later version.

[dsarkar]

@fynngodau @Ein-Tim Thanks. Internal Tracking ID: EXPOSUREAPP-7147

---

Corona-Warn-App Open Source Team

[Ein-Tim]

In fact, I can see, that there is no input validation at all (like birthday can only be numbers, e-mail address has to include a @, etc.)

[ndegendogo]

I agree that emojis are not expected to be used in names field. However, the set of valid characters should not be limited to pure ASCII letters. In Germany, we have Umlauts. Many people have accents in their names. And people from other cultures can have most of the Unicode letters. If you don't want to exclude / discriminate these people, it will be not easy to specify the "allowed" or "forbidden" letters.

[Ein-Tim]

@ndegendogo

I agree with you there, but let's also agree to:

• Deactivate emojis
• Force the date of birth to be all numbers (via the emulator I can enter letters...)
• Force the date of birth to be in the past

Or do you think there could be any problems with this?

[jucktnich]

@Ein-Tim you can also just paste letters into birth date

[DerVogel2020]

In the android app, I cannot paste letters, since the format dd.mm.yy is not satisfied.
But a date in the future is possible to select.
PLZ can be a text.

[jucktnich]

Oh sorry, there's an input validation there for birthday, you can paste it, but it stays nil if you save the profile

[ndegendogo]

@Ein-Tim sure 😅