Sven Sauleau

> There was https://github.com/xtuc/wasm-coredump/tree/main/bin/wasmgdb but as far as I know it only works with an old version of the format. Sorry about that. I'm planning to update wasmgdb to the...

@fitzgen do you know if there are plans now in Wasmtime to recover the locals and operand stack, especially for cranelift? I saw that winch might preserve them. Unfortunately, right...

Sounds good. I'm assuming adding some kind of pseudo instructions in Cranelift for extra bookkeeping (when coredump-on-trap is set) has an acceptable perf impact. Comparing to the current solution of...

> How would this interact with ES6 module integration My solution to not having the ES modules live bindings in wasm was to fake importable mutable globals ([details here](https://github.com/webpack/webpack/issues/6433#issuecomment-372232238)). To...

@grishka It's good security practice to periodically rotate private keys and set expiry on tokens.

For more context, the user session tokens we are using are JWT and are signed. It's the signing key pair that is automically and periodically rotated, meaning that after a...

"behind the scenes" was maybe a bit optimistic. Similar to the login flow, would it be possible to open a web browser, follow redirections and load cookies left during login?...

@nicolo-ribaudo I think that means we have no tests for it. @clinyong would you mind adding tests for it?

Ok, thanks.

Cloudflare had a polyfill[.]io mirror for a while: https://blog.cloudflare.com/polyfill-io-now-available-on-cdnjs-reduce-your-supply-chain-risk. What's new is that we are automatically rewriting the insecure polyfill[.]io scripts to our mirror: https://blog.cloudflare.com/automatically-replacing-polyfill-io-links-with-cloudflares-mirror-for-a-safer-internet/.