• dohpaz42@lemmy.world
      link
      fedilink
      English
      arrow-up
      64
      ·
      3 days ago

      Not always. My mortgage company uses a software where it treats the password as invalid if it’s autofilled. I have to copy and paste the password into the box to remove the error.

      Why people and companies need to make things purposefully difficult is beyond me. This shit is decades old and solved. Yet, they’re still constantly broken.

      • KairuByte@lemmy.dbzer0.com
        link
        fedilink
        arrow-up
        8
        ·
        3 days ago

        Are they valid after names? I mean I suppose they could be, but how could you ever, and I mean ever, write out the name in that case?

            • 0x0@lemmy.zip
              link
              fedilink
              arrow-up
              2
              arrow-down
              1
              ·
              3 days ago

              11 i thought all alphabets have been encoded in Unicode?
              15 Murica and Brazil have no rules whatsoever so i guess it can happen.

              • gandalf_der_13te@feddit.org
                link
                fedilink
                arrow-up
                1
                ·
                2 days ago

                some people don’t even have a native writing system so i guess their name is not canonically mapped in unicode characters either.

          • balsoft@lemmy.ml
            link
            fedilink
            arrow-up
            10
            arrow-down
            1
            ·
            3 days ago

            No it shouldn’t. Text field entry should have two properties: (1) accept any UTF-8 string, (2) do not modify that string.

            If you want to make sure people don’t make mistakes, take all your current validation code and turn it into a huge red warning that pops up if you try to continue with an “incorrect” field, asking you to double-check before proceeding. In the OP case it would be “You have entered an uncommon name”, in case of extra whitespace it would be “There is whitespace after the name”. Let the person themselves edit the field, don’t change the text automatically at all.

            If those fields are used for anything other than interacting with the person entering them, validate during submission. In this case, charge a $1 HOLD on the credit card using the info provided.

            Anything other than that will lead to someone somewhere having an issue like the OP.

            • eatham 🇦🇺@aussie.zone
              link
              fedilink
              English
              arrow-up
              8
              arrow-down
              2
              ·
              3 days ago

              No, you should definitely sanitize the names if you are going to display them anywhere. You don’t need JS to execute just because it’s in someone’s name, and that would also cause it to display incorrectly as the JS portion would not be shown. Getting rid of excess whitespace is fine aswell as it does not change the name

              • balsoft@lemmy.ml
                link
                fedilink
                arrow-up
                13
                arrow-down
                2
                ·
                edit-2
                3 days ago

                That’s just awful security practices. You must not replace proper code/data separation with user input sanitization. If you are just pulling names from a database and inserting them into your DOM directly you’re doing things majorly wrong and half your codebase probably needs rewriting from scratch.

                If your stack does not support code/data separation, you should escape at the point of use/point of interface with other software, not at the point of user data entry.

                You should not “sanitize” something as personal as a name. It is up to the individual to identify themselves as they see fit, whether it is some weird legal name or just how they want to present. For every “rule” about names you can think of, there will be an exception somewhere.

                In fact, even splitting up the name field into “first name” and “last name” is already wrong. It should just be “name”. If you need there to be a separate “first name” and “last name” for some reason (e.g. an external system which requires it), allow leaving either one as empty. Bonus points if you have independent “legal name” and “how would you like to be called” fields.

                Getting rid of excess whitespace is fine aswell as it does not change the name

                As a responsible developer you must not assume this. Especially if your software interacts with other systems. You never know what dumb shit some other system has got up to, maybe a clerk somewhere accidentally entered someone’s name with a space and that person desperately needs to use your software while they’re getting things fixed.

                As an immigrant, I have been personally strongly inconvenienced by user input validation very often. For example, a tax agency system (which has my passport number recorded with a space) rejected automatic declarations from my bank (where the system did not allow spaces in the passport number) so I had to fill my tax declarations manually for a while. Or my bank rejecting bills from the water utility because the utility’s system required entering two surnames, and I only have one, so they just put it in there twice. The amount of services which reject my pretty normal-looking self-hosted email address with “enter a valid email address” (presumably it must end in @gmail.com or @outlook.com) is staggering. This kind of bullshit is widespread and it needs to stop. You as a developer don’t know better than the person entering the data about themselves.

                • Pieisawesome@lemmy.dbzer0.com
                  link
                  fedilink
                  English
                  arrow-up
                  5
                  ·
                  3 days ago

                  100% this.

                  So many places do these things wrong and just make wild assumptions based on their limited PoV.

                  I just spent a month adding international phone, name, and postal code support to a legacy app at my job.

                  They weren’t even consistent with their enforcement inside of the app.

                  Don’t add validation for anything unless you understand 100% of the cases. You should use premade libraries or tools in most cases because you will do it incorrectly.

                  The rules around passwords are equally as dumb

    • hig13@lemmy.world
      link
      fedilink
      arrow-up
      6
      ·
      3 days ago

      Couldn’t you just make it so the text box doesn’t accept spaces to prevent that? Why allow a character to be input that makes the field invalid?

      • gwl [he/him]@lemmy.blahaj.zone
        link
        fedilink
        arrow-up
        27
        ·
        3 days ago

        Yeah, that’s also a bad idea, there’s plenty of (mostly none-western) forenames that contain spaces, and plenty of surnames that contain spaces all over the world (Charles de Gaul, Guy Manuel de Hommen-baron)

        All they really need to do is to onSubmit do a .trim() to the name

      • FooBarrington@lemmy.world
        link
        fedilink
        arrow-up
        16
        ·
        3 days ago

        Because even if a space at the end of the name should be considered invalid, people can have names with spaces inside.

        • Whats_your_reasoning@lemmy.world
          link
          fedilink
          arrow-up
          8
          ·
          3 days ago

          This is true. I know someone with a legal first name that’s two words. He’s a kid I work with. His parents made a point that his name isn’t one or the other, it’s both, and we are to address him as such.

          To my understanding (as a non-tech person who consumes tech-related media), name fields are commonly culturally biased. Usually it impacts last names, which can vary in size and layout across the world, sometimes including hyphens (which some systems don’t like either.) Super short or long names also run into problems. Not everyone has one first name, one middle name, and one last name, but a lot of systems aren’t designed to handle that kind of variation.

        • Kushan@lemmy.world
          link
          fedilink
          English
          arrow-up
          7
          ·
          3 days ago

          As a primarily backend engineer, I think the opposite here. The backend makes sense, JS is just a nightmare.

          • MonkderVierte@lemmy.zip
            link
            fedilink
            arrow-up
            4
            ·
            edit-2
            3 days ago

            From the typical web developer’ view of course. They don’t even know the <form><input type="submit"> thing anymore nowadays, neither the people who developed their framework. Can’t apply for a job, because the js-form has a bug!

      • dev_null@lemmy.ml
        link
        fedilink
        arrow-up
        8
        arrow-down
        1
        ·
        3 days ago

        Of course you can. But whoever developed the form didn’t care about their craft.

        • tigeruppercut@lemmy.zip
          link
          fedilink
          arrow-up
          6
          arrow-down
          1
          ·
          3 days ago

          Japan has gotten a lot better but you still run into shit for this sometimes. First and middle names often have to be input without a space, so you end up with Johnwendell Anderson. And sometimes forms require names to be input with the Japanese phonetic alphabet (which lacks a lot of letters in English), and then if it doesn’t match some document you need to verify an online input there can be trouble. So Jeeves would become Jiibuzu, and good luck matching that to your passport at the airport.

        • boonhet@sopuli.xyz
          link
          fedilink
          arrow-up
          2
          ·
          3 days ago

          Or they work for a for-profit company so there’s KPIs on how much they go under/over estimate on a task and either someone else did the estimate, or coworkers judge them for conservative estimates, so they did it as quickly as possible

  • psycotica0@lemmy.ca
    link
    fedilink
    arrow-up
    38
    ·
    3 days ago

    I don’t know what the problem is for this person, but my name is Christopher. Super white, Christian, and “normal”. My bank thinks my name is Christophe because apparently 10 characters is enough for the first name column.

  • noughtnaut@lemmy.world
    link
    fedilink
    arrow-up
    34
    ·
    3 days ago

    It’s also fun buying tickets from the Belgian airline, when they tell me that my family name contains illegal characters. Really? Tell me they’re invalid or better yet unacceptable, but not that.

    • filcuk@feddit.uk
      link
      fedilink
      arrow-up
      17
      ·
      3 days ago

      Programmers making ui/ux decisions haha. You’ll pry ‘undefined’ from my cold, dead hands

    • BoxOfFeet@lemmy.world
      link
      fedilink
      English
      arrow-up
      11
      arrow-down
      1
      ·
      3 days ago

      My mother-in-law worked at a preschool, and there was actually a little girl named Sexianna.

        • BoxOfFeet@lemmy.world
          link
          fedilink
          English
          arrow-up
          3
          ·
          3 days ago

          Absolutely. I probably wouldn’t believe her, but my wife confirmed it. She used to go in to help out. The little girl also had a brother named Sir King.

  • Duamerthrax@lemmy.world
    link
    fedilink
    English
    arrow-up
    11
    ·
    3 days ago

    There’s a lot of whitespace before the name. Any chance they hit the space bar before talking the screen shot?

  • mabeledo@lemmy.world
    link
    fedilink
    arrow-up
    15
    ·
    3 days ago

    Welcome to my world, where a first name with two words cannot exist, and every single credit card I own has a different name printed on them.

  • TootSweet@lemmy.world
    link
    fedilink
    English
    arrow-up
    16
    ·
    3 days ago

    I’d try replacing letters with homoglyphs. Doubt it would work, but not so much that I didn’t think it was worth a try.

    I mean, first I’d check to make sure I hadn’t added any leading/trailing spaces. There does appear to be a lot of space before the K. Might technically be why it isn’t working.

    Not that the site doesn’t still have serious dumb issues even if that is the issue. But yeah.