Rating:

Original writeup (http://blog.dragonsector.pl/2017/03/0ctf-2017-complicated-xss-web-177.html).