fix(demo): anonymize the Nicoya reference in the form-less demo (SOC-78)#13
Open
chongkan wants to merge 1 commit into
Open
fix(demo): anonymize the Nicoya reference in the form-less demo (SOC-78)#13chongkan wants to merge 1 commit into
chongkan wants to merge 1 commit into
Conversation
…demo (SOC-78 / F-2) Removes the implied-affiliation + insecure-URL disclosure flagged in the audit: - Screenshot: cropped off the browser chrome (address bar showing http://visadosweb.nicoya.go.cr + the founder's extension toolbar), keeping only the generic form content; renamed nicoya-visado.png -> municipal-form-insecure.png. - Verifier renamed 'Municipalidad de Nicoya' -> fictional 'Municipalidad de San Buenaventura'; did:web:municoya.go.cr -> did:web:sanbuenaventura.go.cr; sample location de-Nicoya'd. - Added 'Fictional municipality — demo only, no real affiliation' to the demo card and 'no municipality is affiliated with this demo' to the figure caption (EN + ES); caption no longer over-claims the now-removed URL. Real government issuers (RNP/TSE) are unchanged — they are the factual issuers of those credentials, not an unaffiliated party cast as the verifier. astro build clean (71 pages).
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
SOC-78 / F-2 — anonymize the Nicoya reference in the form-less demo
Closes SOC-78 (Medium, strategic/disclosure) — the "before" picture named a real municipality and published its live insecure URL, ahead of the 07-20 launch.
What changed
nicoya-visado.png(removed the address bar showinghttp://visadosweb.nicoya.go.cr/usuarios/registrar, the "Not secure" URL, and the founder's extension toolbar). Only the generic municipal form remains (it reads "Sistema de Visado Municipal" — no municipality name). Renamed the asset →municipal-form-insecure.png(1472×884 after crop;<img>dims updated).Municipalidad de Nicoya→ fictionalMunicipalidad de San Buenaventura;did:web:municoya.go.cr→did:web:sanbuenaventura.go.cr; sample location de-Nicoya'd. Nonicoya/municoyastring remains anywhere insrc//public/demo/.Deliberately unchanged
Real government issuers (
did:web:rnpdigital.go.cr= RNP,did:web:tse.go.cr= TSE) are the factual issuers of those credentials, not an unaffiliated party cast as the verifier — the audit flagged only the muni/verifier.astro buildclean (71 pages). Original screenshot backed up locally (scratchpad) if the crop needs adjusting.