Pepijn Verlaan

Remove bias when generating secrets

7

Hi, thanks so much for this project! It's really helping me out. I looked over the code and found something that might be improved. The way secrets were generated not...

Multiple instances

1

This change provides a way to create multiple instances of Mu. Each instance has its own root directory and cache, so you can safely run templates from different directories. Note:...

The problem from #43 persists with a different test case. The fix from ce52cf6 does not prevent cases where the stack grows under a certain limit in each scope, but...

Host header can be spoofed

3

If we send an HTTP 1.0 request without a Host header we can add some spoof data to the request body. In the example `vost` is the host the service...

Headers are not always fully parsed

1

If traffic gets fragmented, only the first fragment is parsed for headers. If the Host header is not in the first fragment, the request is not handled. Example: ``` sh...

The Strava heatmap site has a new sport dropdown. And the mapping from the selected sport in the query parameters to the tiles url changed. It is now: | Dropdown...