A Flask page whose client-side script reads a text field and inserts it into the page with jQuery's html(), never touching the server.
Pas commencéDockercommit 16a37f9x86_64 · aarch64Secret
Make the page's own JavaScript execute a script of yours through the DOM sink (DOM-based cross-site scripting).
Le brief de ce lab se trouve dans son dépôt.