Rename HECVAT-415.html to index.html for GitHub Pages

Makes the site accessible at the repo root URL without needing
a filename in the path. Updates all references in README, app.js,
and the nginx/apache/Caddy/_headers server configs.

Author: jdhori

README.md

@@ -9,7 +9,7 @@
 
 ```
 HECVAT-415/
-├── HECVAT-415.html   — Open this file in your browser to use the form
+├── index.html   — Open this file in your browser to use the form
 ├── hecvat-data.js    — Question data (332 questions from HECVAT 4.1.5 xlsx)
 ├── hecvat-app.js     — Application logic
 └── hecvat.css        — Stylesheet
@@ -23,7 +23,7 @@ other three by relative path, so moving them apart will break the tool.
 ## Getting Started
 
 1. **Unzip** the archive into a folder on your computer.
-2. **Open `HECVAT-415.html`** in a modern browser — Chrome, Firefox, Edge, or
+2. **Open `index.html`** in a modern browser — Chrome, Firefox, Edge, or
    Safari. No internet connection, server, or installation required.
 3. Begin on the **Start Here** section. Your answers to the Required Questions
    there determine which other sections apply to your product.
@@ -330,7 +330,7 @@ authoritative guidance on question interpretation and submission requirements.
 
 ## Hosted Deployment Guide
 
-This tool is designed to run as a local file (`file://`) but can be hosted on a web server. When hosted, you **must** serve the security headers as HTTP response headers — the `<meta>` tags in `HECVAT-415.html` are a fallback, but HTTP headers provide stronger and more reliable enforcement.
+This tool is designed to run as a local file (`file://`) but can be hosted on a web server. When hosted, you **must** serve the security headers as HTTP response headers — the `<meta>` tags in `index.html` are a fallback, but HTTP headers provide stronger and more reliable enforcement.
 
 ### Server configuration files
 
@@ -360,7 +360,7 @@ Every server configuration sets these headers:
 
 ### Deployment on Netlify or Cloudflare Pages
 
-1. Copy the four tool files (`HECVAT-415.html`, `hecvat-app.js`, `hecvat-data.js`, `hecvat.css`) and the `_headers` file into your repository root.
+1. Copy the four tool files (`index.html`, `hecvat-app.js`, `hecvat-data.js`, `hecvat.css`) and the `_headers` file into your repository root.
 2. Set your publish directory to the repository root.
 3. Deploy. Both platforms automatically apply the `_headers` file.
 

hecvat-app.js

@@ -36,13 +36,13 @@
    5. Clear & Reset            — wipes both localStorage AND
       sessionStorage keys, then reloads.
 
-   6. CSP                      — HECVAT-415.html carries a <meta>
+   6. CSP                      — index.html carries a <meta>
       CSP.  If hosted on a web server, the same policy should be
       delivered as an HTTP Content-Security-Policy response header
       for stronger enforcement (meta CSP cannot cover all cases and
       is easier to bypass in some browser configurations).
       Current policy: no eval, no inline scripts/styles, no external
-      origins, no framing.  See HECVAT-415.html and the server
+      origins, no framing.  See index.html and the server
       configuration guide in README.md.
    ============================================================ */
 

hecvat_v20/server-configs/Caddyfile

@@ -12,11 +12,11 @@ hecvat.yourdomain.edu {
     file_server
 
     # Default page
-    try_files {path} HECVAT-415.html
+    try_files {path} index.html
 
     # ── Security headers ──────────────────────────────────────────────
     # These HTTP headers take precedence over the equivalent <meta> tags
-    # in HECVAT-415.html and provide stronger enforcement.
+    # in index.html and provide stronger enforcement.
 
     header {
         # Content Security Policy

hecvat_v20/server-configs/_headers

@@ -1,16 +1,16 @@
 # HECVAT 4.1.5 — Netlify / Cloudflare Pages headers file
 #
 # Place this file at the ROOT of your published site (same level as
-# HECVAT-415.html).  It is automatically picked up by both:
+# index.html).  It is automatically picked up by both:
 #   - Netlify (https://docs.netlify.com/routing/headers/)
 #   - Cloudflare Pages (https://developers.cloudflare.com/pages/configuration/headers/)
 #
 # These HTTP headers take precedence over the equivalent <meta> tags
-# in HECVAT-415.html and provide stronger enforcement.
+# in index.html and provide stronger enforcement.
 
 /*
   # Content Security Policy
-  # Mirrors the meta-tag CSP in HECVAT-415.html exactly.
+  # Mirrors the meta-tag CSP in index.html exactly.
   Content-Security-Policy: default-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'; base-uri 'self'; form-action 'none'; frame-ancestors 'none';
 
   # Clickjacking protection (complements frame-ancestors in CSP)

hecvat_v20/server-configs/apache.conf

@@ -8,7 +8,7 @@
 <VirtualHost *:443>
     ServerName  hecvat.yourdomain.edu
     DocumentRoot /var/www/hecvat
-    DirectoryIndex HECVAT-415.html
+    DirectoryIndex index.html
 
     # --- TLS ---
     SSLEngine on
@@ -25,7 +25,7 @@
 
         # ── Security headers ─────────────────────────────────────────────
         # These headers are the primary enforcement mechanism.
-        # They complement the <meta> CSP tag in HECVAT-415.html and
+        # They complement the <meta> CSP tag in index.html and
         # take precedence over it.
 
         # Content Security Policy

hecvat_v20/server-configs/nginx.conf

@@ -15,19 +15,19 @@ server {
     ssl_ciphers         HIGH:!aNULL:!MD5;
     ssl_prefer_server_ciphers on;
 
-    # --- Document root (folder containing HECVAT-415.html) ---
+    # --- Document root (folder containing index.html) ---
     root  /var/www/hecvat;
-    index HECVAT-415.html;
+    index index.html;
 
     location / {
         try_files $uri $uri/ =404;
 
         # ── Security headers ────────────────────────────────────────────
         # These headers apply to every response. They take precedence over
-        # the equivalent <meta> tags in HECVAT-415.html.
+        # the equivalent <meta> tags in index.html.
 
         # Content Security Policy
-        # Mirrors the meta-tag CSP in HECVAT-415.html exactly.
+        # Mirrors the meta-tag CSP in index.html exactly.
         # Delivering it as an HTTP header provides stronger enforcement
         # (covers preflight requests, multipart responses, and some
         # browser quirks that ignore meta-tag CSP).