Kristian Hellang

This PR pulls in quite a few dependencies... ``` Microsoft.AspNetCore.Antiforgery Microsoft.AspNetCore.Authorization Microsoft.AspNetCore.Cryptography.Internal Microsoft.AspNetCore.DataProtection Microsoft.AspNetCore.DataProtection.Abstractions Microsoft.AspNetCore.Diagnostics.Abstractions Microsoft.AspNetCore.Hosting.Abstractions Microsoft.AspNetCore.Hosting.Server.Abstractions Microsoft.AspNetCore.Html.Abstractions Microsoft.AspNetCore.Http Microsoft.AspNetCore.Http.Abstractions Microsoft.AspNetCore.Http.Extensions Microsoft.AspNetCore.Http.Features Microsoft.AspNetCore.JsonPatch Microsoft.AspNetCore.Mvc.Abstractions Microsoft.AspNetCore.Mvc.Core Microsoft.AspNetCore.Mvc.DataAnnotations Microsoft.AspNetCore.Mvc.Formatters.Json Microsoft.AspNetCore.Mvc.Razor Microsoft.AspNetCore.Mvc.Razor.Host Microsoft.AspNetCore.Mvc.ViewFeatures...

> The MVC Razor bits are tightly coupled to the rest of the MVC framework. Yeah. This is the main problem. I remember @thecodejunkie talked with the team (@NTaylorMullen?) quite...

> Are there any nancy specific razor features? I don't think so. It's mostly about using the `NancyContext` instead of `HttpContext` etc. `RazorPage`? :smile: > This requires a bunch of...

> This behavior is in my opinion not excepted and may be security gap. Why is this a "security gap"?

I know what binding to 0.0.0.0 (and [::]) means, but that doesn't mean it's a "security gap". This is `HttpListener` behavior; it'll answer with a 400 status code for anything...

Closed with #2903

Both use HttpListener underneath. Nancy.Hosting.Self is just a thin Nancy-specific wrapper around it. Microsoft.Owin.HttpListener is based on OWIN, which you can read about elsewhere. In the OWIN model, Nancy is...

Yeah, I just checked the net452 DLL in https://myget.org/feed/nancyfx/package/nuget/Nancy/2.0.0-pre1909, which is the build of #2898, and it looks to be JIT optimized: 

Hehe 😝 Are they still taking patches for round 16?

:+1: This will be done as part of the 2.0 overhaul. We're planning on dropping 4.0 support and go full-blown async/await all over the place. The `Contents` property will most...