|
All Categories

Kids Mode Escape

Weight 3

Can children escape the restricted browsing experience?

Test ID: KM-01 · Learn how scoring works

Category score:0 Full Block
Child (7)A-
0

Netflix Kids profile has strong URL containment for browse/genre endpoints. The server-side Kids profile enforcement overrides the URL path, always rendering the Kids experience regardless of the URL navigated to. However, this does NOT apply to /title/ (partially protected) or /watch/ (completely unprotected) endpoints as documented in DU-01 and DU-02.

Child (12)A

Not tested for this profile.

Teen (16)A

Not tested for this profile.

Category score:1 Partial Block
Child (7)D (capped)
1

Kids profile has dedicated 'Peacock Kids' walled garden at /watch/kids/highlights with only Home and My Stuff navigation. /watch/home redirects to Kids home. However, adult-only pages (/watch/movies/highlights) show 'Please switch to a non-kids profile' with profile picker — revealing adult content sections exist and providing zero-auth profile switcher.

Child (12)A
1

Same as TestChild7 — Kids walled garden with profile switch prompts on adult pages

Teen (16)B+
0

Teen profile is not in 'Kids Mode' — it uses the full adult browsing UI with Home, Movies, TV Shows, Sports, My Stuff, Channels navigation. No walled garden to escape from. This is by design for Teen profiles.

Category score:0 Full Block
Child (7)D (capped)
0

Kids profile UI is well-contained. All navigation endpoints (storefront, movies, TV shows, offers, channels) redirect to kid-appropriate content. Settings requires re-authentication.

Child (12)A+
0

Same as TestChild7 — Kids UI containment

Teen (16)B+
0

Teen profile is not in 'Kids Mode' — it uses the full adult browsing UI. No walled garden to escape from. This is by design for Teen profiles.

Score key:0 = Full Block1 = Partial Block2 = Soft Barrier3 = Unprotected4 = Facilitated

Lower scores are better. 0 means the platform fully blocks the attack vector. The category score shown on each card is the worst (highest) score across all profiles.