← back to room
SSTI

TemplateCraft — Preview

Scenario

TemplateCraft merges your name into a Jinja preview template. Double-curly expressions might be evaluated before the page renders. Prove server-side evaluation by making the template compute a math expression.

Your approach

  1. Enter a normal name and view the preview output.
  2. Submit a template expression that multiplies two numbers.
  3. Confirm the rendered page shows the computed result, not literal braces.
  4. Copy the basic SSTI confirmation flag.
  5. Submit that flag.
Email preview