dillontkh / pe

0 stars 0 forks source link

Overzealous input validation for name #7

Open dillontkh opened 2 months ago

dillontkh commented 2 months ago

image.png

As this is an application meant to be used by nurses, it is not unlikely that the name stored in the application is the patient's full legal name, which could contain non-alphanumeric characters like /

soc-se-bot commented 2 months ago

Team's Response

Hi, thanks for pointing this out.

However, we have already identified this issue and have also put it down in our Planned Enhancements in our DG (See: Section 4.6)

image.png

Items for the Tester to Verify

:question: Issue response

Team chose [response.NotInScope]

Reason for disagreement: [replace this with your explanation]