A Flask page whose client-side script reads a text field and inserts it into the page with jQuery's html(), never touching the server.
Not startedDockercommit 16a37f9x86_64 · aarch64Secret
Make the page's own JavaScript execute a script of yours through the DOM sink (DOM-based cross-site scripting).
The brief for this lab lives in its repository.