http://fadec0d3.blogspot.com/2017/02/bitsctf-2017-web-batman-vs-joker.html

Original writeup (http://fadec0d3.blogspot.com/2017/02/bitsctf-2017-web-batman-vs-joker.html).