CSS injection to read out the flag on the page one letter at a time.

Original writeup (https://www.nevivur.net/writeups/2019/04/tjctf-2019/#moar-horse-3).