-
Notifications
You must be signed in to change notification settings - Fork 8
Open
Description
Due to the nature of the widget as a survey tool and the presence of a free response question type, it's plausible that a person could create a survey in which they ask for information of a sensitive nature.
There are an awful lot of cases where this could be a problem, but there are probably at least a few low-hanging items we can reasonably guard against. At minimum a disclaimer in the creator not to create questions asking for sensitive data, maybe some parsers on the free response input to check for typical things (SSN, Phone number, e-mail address, etc.), maybe also some parsers on the free response question input to check for suspect phrases ('social security', 'security number', 'address', 'email', 'phone', 'ID', etc.).
Metadata
Metadata
Assignees
Labels
No labels