Editorial: fixup xrefs

Author: marcoscaceres

index.html

@@ -345,7 +345,7 @@ <h3>
       <h3>
         User consent
       </h3>
-      <p>
+      <p data-cite="permissions">
         The <cite>Digital Credential API</cite> is a [=powerful feature=] that
         requires [=express permission=] from an end-user. This requirement is
         normatively enforced when calling {{CredentialsContainer}}'s
@@ -360,7 +360,7 @@ <h2>
         This specification defines a [=policy-controlled feature=] identified
         by the string <dfn class="permission">"digital-credentials-get"</dfn>.
         Its [=policy-controlled feature/default allowlist=] is
-        [=allowlist/'self'=].
+        [=default allowlist/'self'=].
       </p>
     </section>
     <h2 id="protocol-registry">