THE TICKET
Brief
A ticket customizer recursively merges guest JSON into a fresh order. Reach inherited priority without supplying a top-level priority property.
Objective
Make a blank object report priority = rush, then recover the practice flag.
- Input
- JSON object
- Success
- ({}).priority === "rush"
- Boundary
- sandboxed frame
This intentionally vulnerable merge runs in an opaque-origin frame.
TEAR-OFF CLUES
Hints
No hints opened. This is not scored.
FINAL CHECK
SHA-256 / LOCALStamp the flag.
The answer pass is waiting.
Validation happens entirely on this device. No answer or activity is transmitted.