YesWeHack & Alibaba Security Meetup challenge solution

This report is a step-by-step write-up of exploiting an XSS vulnerability in a minimalist web gallery. It explains how the application constructs a loader from a URL hash, how the author used a debug reflection to execute scripts (Step 1), split parameters to bypass Chrome's XSS Auditor (Step 2), and finally abused CSP 'strict-dynamic' by injecting a fake global config element to load attacker-controlled script content (Step 3). The write-up includes payload examples, server responses, and mitigation-relevant notes about CSP, XSS-Auditor, and script nonce behavior.