How long is the string in question?
Given the ease with which these bugs can be sent to others, could they run an automated test covering the entire Unicode character set? Obviously if the bug requires a multiple character string it becomes significantly more difficult to achieve full test coverage.
Unicode 10.0 has >136,000 character codepoints plus additional non-character codepoints. That by itself isn't so bad, but some codepoints can (and will) get combined, sometimes even recursively. For example,
ö can be expressed both as its own codepoint LATIN SMALL LETTER O WITH DIAERESIS, or by combining the two codepoints for
¨ COMBINING DIAERESIS and
o LATIN SMALL LETTER O.
For emoji, it gets a lot more complex than that — there are the skintone modifiers such as EMOJI MODIFIER FITZPATRICK TYPE-3, and various other combining codepoints that let you, say, create a family emoji by combining three different humans.
What you end up with is a practically unlimited amount of permutations, and the best you can do is to hard-limit the amount of recursion allowed. Presumably, Apple and Google already do this in some places.
[doublepost=1526035927][/doublepost]
What? The “I’ll be there in 10” has to be encrypted?
Sure. My personal schedule is nobody's business, and there are plenty of reasons you wouldn't want someone snooping on where they can find you at what point in time.
iPhone users understand the limitations of technology and use it appropriately.
Maybe, but that doesn't mean technology shouldn't strive to be better.