Please, do not write just a link to original writeup here.

Original writeup (https://github.com/rollsafe/ctf-writeups/tree/master/tuctf-2017/iFrame-and-shame-300).