This is a stripped-down version of a single section of Grok TiddlyWiki, optimized for fast loading and readability by search engines. Some features are missing.

For the full Grok TiddlyWiki experience, please visit the wiki version of this page.

Ex:BypassSecurityWithTextSubstitution

7th February 2021 at 4:38pm

Suppose that the following macro is being used to validate whether the user is authorized to access something:

\define checkAuthorization(password)
<$list filter="[[$password$]match{$:/config/SecretPasswordExample}]">
  The user is authorized.
</$list>
\end

<<checkAuthorization "">>

Without looking up the password, figure out what you can fill in between the quotation marks in the macro call to bypass the password check. Check your answer by editing the live example above.

Go to answer: Ex:BypassSecurityWithTextSubstitution/answer