cspshivam/playground
Redirect Level 3 / 6 Medium
← All labs

Client-Side Redirect

The forward is performed in the browser. Own the destination anyway.

Redirecting…

This page bounces you onward in the browser using a meta refresh / JavaScript, reading the destination from next. Control where it points. (The bounce is shown as code, not executed, so you can read the flag.)

This is an isolated, intentionally-vulnerable sandbox. Data here is fake and scoped to you. The rest of CSPSHIVAM Playground is not part of the target.