Rating: 2.0

Looking at the diff, we see that ":", "g" and "Q" keys do not work. We can still use [ctrl-w]+[f] to go to a file with the name under cursor. The only problem is that ctrl-w is captured by the browser and causes the tab to close. So I used burp suite to modify the input and read the file /flag: