Go to:

http://isecpartners.github.io/fuzzing/vulnerabilities/2013/12/30/vlc-vulnerability.html

Click on the * to decide scope.

Options are:

http://isecpartners.github.io

http://*.isecpartners.github.io

Ideally it would be: http://*.github.io , at least that makes sense to me?

Or at least, that should be included.

Seems like a behavior issue, when there is a domain and a subdomain the subdomain should be *'d as an option.

Example of it done properly: movies.netflix.com

Options:

https://*.netflix.com

https://movies.netflix.com

I hope this is clear enough.