Secure or Broken? A puzzle game about the pain of configuring CSP
CSP puzzle game where you balance blocking XSS payloads against keeping your app's inline scripts working.

Landing page is a Reddit security block — no game visible, no code linked.
Reddit users interested in browser games
CSP puzzle game where you balance blocking XSS payloads against keeping your app's inline scripts working.
Link leads to a Reddit network policy block; no project to evaluate.
Phone-as-controller racing with haptics and physics that actually feels like a wheel.
Visual autopsy of your Wikipedia race path when the browser history isn't enough.
The repo does one painful thing well: it inspects SESSION_ID.jsonl, pinpoints where streaming/interleaving corrupted 'thinking' blocks, and offers diagnose, fix (with auto-backup), and nuke fallbacks. It's pragmatic and ruthless — small CLI commands, clear recovery workflow, and rescue-first guidance — but it's narrowly targeted to Claude Code users and won't matter to most people.
Fencing tokens + lease expiry races caught with deterministic test harness—correctness, not just convenience.