Challenges do NOT require any bruteforcing/directory fuzzing/massive amounts of traffic unless clearly specified in the challenge information below.
One of our developer who doesn't RTFM come up with this XSS filter. He thinks his filter is super duper secure. Can you prove him wrong?
The answer to this challenge hasn't been revealed yet! Check back on 2019-08-01 for the answer.