-
Notifications
You must be signed in to change notification settings - Fork 40
Open
Description
Is your feature request related to a problem? Please describe.
We want to prevent clicking on links from malicious urls on the LCW, so disable url links for for credentials from non DCC-supported registries
Describe the solution you'd like
- Determine if any credential in app is from a DCC-supported registry
- If not, still import credential, but disable any urls associated with credential on display screens
- Will need to identify places in app where URLs are displayed (could be alignment, issuer registry on credential preview page, etc.)
- Use conditional logic to show to display clickable url
- Consider showing warning if not verified issuer when accepting credential
Describe alternatives you've considered
Exposing users to malicious urls
Additional context
Summary: This ticket will need to 1) identify all locations of displayed urls, 2) determine if credential is from valid source 3) based on #2, disable link if url is bad.
Metadata
Metadata
Assignees
Type
Projects
Status
Ready for PR Review/re-test