Wasmabism Solution


  1. Find a Unicode character such that when .toLowerCase is called on it, it expands to 2 characters instead of 1.
  2. Use this character to bypass the length check and exploit the buffer overflow to overwrite funcPtr.
  3. Set the function pointer to point to censor as the function to be called, bypassing the XSS check.

Full Solution | Home