Level 6 — Report Builder

Report-generation templates ・ Vulnerability: unrestricted template context ・ ★★★★☆

Generate Report

Template (use {{ dotted.path }} variables)

The template engine renders {{ dotted.path }} placeholders by resolving them against a context object. Only title, body, and date are meant to be shown, but the same context object may carry other fields too.
Goal: reference a field that isn't meant to be rendered, and read the hidden flag.