TL;DR: XSS but on their server wao

Original writeup (https://ubcctf.github.io/2022/03/utctf-HTML2PDF-sigma/#html2pdf).