Vulnerable

You are reading a file your browser was told not to show you.

This response is an attachment named image.png. Safari and every desktop browser hand it to the downloads folder. This webview drew it on screen instead — under this site.

---

Response

Content-Disposition: attachment; filename="image.png"

Capabilities reached on this page

Capability	Result
HTML parsed	yes
CSS applied	yes
JavaScript	sandboxed