add clarifications and a vuln router