Inject js for exfil into the flag page. [original writeup](https://flagbot.ch/posts/sploosh/)