Skip to content

Open Boria Mine Door

Open Boria Mine Door               Web Ring               A picture containing clipart Description automatically generatedHal Tandybuck

Pin 1

Initial State

HTML Source

Input

Result

Graphical user interface, application Description automatically generated

Text Description automatically generated

The HTML Source has the answer:

@&@&&W&&W&&&&

Graphical user interface, text, application, chat or text message Description automatically generated

Pin 2

The comment in the HTML source indicates the developer is yet to filter out HTML code. So, we can send any HTML to draw SVG to connect the pipes.

Graphical user interface, application Description automatically generated

Text Description automatically generated

<html>

<body>

<svg height="210"

width="500">

<line x1="0" y1="70" x2="200" y2="155" style="stroke:rgb(255,255,255);stroke-width:20" />

</svg>

 </body>

</html>

 

Graphical user interface, text Description automatically generated

Pin 3

The comment in HTML source indicates the developer is yet to filter out Javascript code. So, we can send any script to draw the SVG to connect the pipes. It has 'unsafe-inline' Content Security Policy as well which allows execution of inline scripts.

Graphical user interface, application Description automatically generated

Text Description automatically generated

<html><body><canvas id="myCanvas" width="200" height="100" style="border:1px solid #c3c3c3;">

</canvas><script>var canvas = document.getElementById("myCanvas");

var ctx = canvas.getContext("2d");

ctx.beginPath();

ctx.moveTo(0, 90);

ctx.lineTo(250, 10);

ctx.strokeStyle = 'blue';

ctx.lineWidth = 20;

ctx.stroke();</script></body></html>

 

A screenshot of a computer Description automatically generated with medium confidence

 

Upon completing the Pin 3, the boria mine door is opened, and we get 25 coins as well.