The challenge of this month was relatively easy for me as I had recently done a challenge on rootme where I learned a trick that was needed in this challenge. It was cool to see my learning paid off.
Here is the link to the challenge https://challenge-0724.intigriti.io/challenge.
We have the ability to input text, and it will be reflected on the page and the url. When we try to inject a script like <script>alert(1)</script> it's blocked by the CSP. Only scripts with the correct hash are executed by the browser. Now let's take a look at how secure that CSP is:
