Skip to content

Disable url links for for credentials from non DCC-supported registries #881

@alexfigtree

Description

@alexfigtree

Is your feature request related to a problem? Please describe.
We want to prevent clicking on links from malicious urls on the LCW, so disable url links for for credentials from non DCC-supported registries

Describe the solution you'd like

  1. Determine if any credential in app is from a DCC-supported registry
  2. If not, still import credential, but disable any urls associated with credential on display screens
  3. Will need to identify places in app where URLs are displayed (could be alignment, issuer registry on credential preview page, etc.)
  4. Use conditional logic to show to display clickable url
  5. Consider showing warning if not verified issuer when accepting credential

Describe alternatives you've considered
Exposing users to malicious urls

Additional context
Summary: This ticket will need to 1) identify all locations of displayed urls, 2) determine if credential is from valid source 3) based on #2, disable link if url is bad.

Metadata

Metadata

Assignees

Type

No type

Projects

Status

Ready for PR Review/re-test

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions