← All labs
Redirect Level 3 / 6 Medium

Meta / JS Redirect

The redirect happens client-side. Control the destination.

Redirecting…

This page bounces you onward in the browser using a meta refresh / JavaScript, reading the destination from next. Control where it points. (The bounce is shown as code, not executed, so you can read the flag.)

This is an isolated, intentionally-vulnerable sandbox. Data here is fake and scoped to you. The rest of Uncrypt Playground is not part of the target.