Rule 7 · Action: Audit only + mask sensitive text (hover to reveal) · Trigger: URL visited

Data masking — SSN, hover to reveal

Set the rule's URL condition to cepdemo.mobi-sec.de (replaces dlptest.com from the guide). The mask method is Hover to reveal for the Social security number expression. SSNs follow the dlptest.com generation rules — valid area-group-serial structure so detectors fire, but entirely fabricated.

Specimen · HR record extractMask expected
Synthetic records · dlptest.com schemaEmployee SSN Kevin Walker 239-24-4697 Daniel Lewis 127-28-1540 Barbara Martin 128-01-1438 Kenneth Wilson 096-01-3167 Sandra Flores 366-75-8246 Susan Williams 312-99-5851

First 6 rows of the Name + SSN + DOB dataset (30 rows).

Inline sentence variant: the onboarding form for Kevin Walker lists the social security number 239-24-4697 next to the start date, and the payroll export repeats 127-28-1540 for Daniel Lewis.

Pass criteria
  1. On load, every SSN above is visually masked.
  2. Hovering an individual masked value reveals it; moving away re-masks it.
  3. Surrounding text (names, departments) stays readable — only the matching pattern is masked.
  4. An audit event is written; the page itself is never blocked.