← Back to Software Supply Chain
Demo app – configurable third-party widget
This is a Feedback Portal used by the team. It loads a third-party “feedback widget” so users can submit comments. The widget script URL is configurable (e.g. for staging vs production). Your job: find a widget URL that, when loaded, exfiltrates the secret this page holds.
Submit your feedback below. The widget is loaded from the URL configured by the admin.
Script URL (relative path). Pick a path below or type your own, then click Load widget.
Available paths under libs/: