DOJO CHALLENGE #10 Winners!

This write-up documents a proof-of-concept exploit against a JavaScript "palindrome" challenge where input s is mirrored (s + reverse(s)) and evaluated with eval. By supplying the payload `KEY|`, the mirrored expression `KEY||YEK` exploits short-circuit evaluation to return the secret KEY and disclose the flag; the report includes code, PoC, and mitigation suggestions such as removing eval or tightening input filtering.