Rating: 5.0

TLDR: bypass CSP with forms ubmit and reading content using window.open

Original writeup (https://blog.jaquiez.dev/Blog/LACTF2023#CSP).