37 lines
4.2 KiB
XML
37 lines
4.2 KiB
XML
<svg xmlns="http://www.w3.org/2000/svg" width="1200" height="760" viewBox="0 0 1200 760" role="img" aria-labelledby="title desc">
|
|
<title id="title">Карта scope для учебного аудита веб-проекта</title>
|
|
<desc id="desc">Четыре synthetic актива: browser UI, web API, identity boundary и upload delivery. На стрелках указаны граница и владелец; внизу крупно отмечено, что карта не является картой реальной сети и не даёт разрешения на тестирование.</desc>
|
|
<rect width="1200" height="760" fill="#0b1220"/>
|
|
<rect x="42" y="34" width="1116" height="96" rx="18" fill="#10253d" stroke="#5eead4" stroke-width="2"/>
|
|
<text x="78" y="77" fill="#f8fafc" font-family="Arial, sans-serif" font-size="33" font-weight="700">Scope до первого теста: активы, границы, владельцы</text>
|
|
<text x="78" y="109" fill="#a5f3fc" font-family="Arial, sans-serif" font-size="20">Учебная карта фиксирует вопросы для review, а не адреса, доступы или результат проверки.</text>
|
|
<defs>
|
|
<marker id="arrow" markerWidth="10" markerHeight="10" refX="8" refY="5" orient="auto"><path d="M0,0 L10,5 L0,10 z" fill="#67e8f9"/></marker>
|
|
</defs>
|
|
<path d="M294 276 C360 276 388 276 452 276" fill="none" stroke="#67e8f9" stroke-width="5" marker-end="url(#arrow)"/>
|
|
<path d="M748 276 C816 276 842 276 902 276" fill="none" stroke="#67e8f9" stroke-width="5" marker-end="url(#arrow)"/>
|
|
<path d="M600 374 L600 485" fill="none" stroke="#67e8f9" stroke-width="5" marker-end="url(#arrow)"/>
|
|
<rect x="78" y="198" width="216" height="156" rx="16" fill="#19324d" stroke="#5eead4" stroke-width="2"/>
|
|
<text x="102" y="240" fill="#f8fafc" font-family="Arial, sans-serif" font-size="25" font-weight="700">Browser UI</text>
|
|
<text x="102" y="274" fill="#bae6fd" font-family="Arial, sans-serif" font-size="17">synthetic-public</text>
|
|
<text x="102" y="301" fill="#bae6fd" font-family="Arial, sans-serif" font-size="17">owner: web</text>
|
|
<text x="102" y="328" fill="#bae6fd" font-family="Arial, sans-serif" font-size="17">вопрос: entry</text>
|
|
<rect x="452" y="198" width="296" height="156" rx="16" fill="#153f4a" stroke="#5eead4" stroke-width="2"/>
|
|
<text x="476" y="240" fill="#f8fafc" font-family="Arial, sans-serif" font-size="25" font-weight="700">Web API</text>
|
|
<text x="476" y="274" fill="#ccfbf1" font-family="Arial, sans-serif" font-size="17">browser → API boundary</text>
|
|
<text x="476" y="301" fill="#ccfbf1" font-family="Arial, sans-serif" font-size="17">owner: web</text>
|
|
<text x="476" y="328" fill="#ccfbf1" font-family="Arial, sans-serif" font-size="17">вопрос: authz contract</text>
|
|
<rect x="902" y="198" width="220" height="156" rx="16" fill="#382c56" stroke="#c4b5fd" stroke-width="2"/>
|
|
<text x="926" y="240" fill="#f8fafc" font-family="Arial, sans-serif" font-size="24" font-weight="700">Identity</text>
|
|
<text x="926" y="274" fill="#ddd6fe" font-family="Arial, sans-serif" font-size="17">third-party</text>
|
|
<text x="926" y="301" fill="#ddd6fe" font-family="Arial, sans-serif" font-size="17">owner: identity</text>
|
|
<text x="926" y="328" fill="#ddd6fe" font-family="Arial, sans-serif" font-size="17">вопрос: scope</text>
|
|
<rect x="420" y="485" width="360" height="152" rx="16" fill="#4a2f1b" stroke="#fbbf24" stroke-width="2"/>
|
|
<text x="446" y="526" fill="#fef3c7" font-family="Arial, sans-serif" font-size="25" font-weight="700">Upload delivery</text>
|
|
<text x="446" y="560" fill="#fde68a" font-family="Arial, sans-serif" font-size="17">upload → delivery boundary</text>
|
|
<text x="446" y="587" fill="#fde68a" font-family="Arial, sans-serif" font-size="17">owner: web</text>
|
|
<text x="446" y="614" fill="#fde68a" font-family="Arial, sans-serif" font-size="17">вопрос: serve contract</text>
|
|
<rect x="42" y="677" width="1116" height="51" rx="12" fill="#3a1720" stroke="#fb7185" stroke-width="2"/>
|
|
<text x="78" y="711" fill="#fecdd3" font-family="Arial, sans-serif" font-size="21" font-weight="700">Synthetic only: это не карта сети, не перечень URL и не permission to test.</text>
|
|
</svg>
|