DOJO CHALLENGE #9 Winners!

Remmer’s write-up describes a prototype-pollution based bypass of a server-side WAF that allows non-string objects to evade input checks, resulting in an SSRF that retrieves an internal secret (flag). The report provides PoC payloads, the final working JSON payload for the challenge, impact analysis and recommended fixes (use typeof checks, enforce integer ports, and build URLs via the URL API).