Is something wrong?

[y0d4a]

Hi,

I am using the Dockerized version of SecureCodingDojo. While working on the Second Degree Black Belt: XML External Entities challenge, I successfully extracted the password, used it in an XML document to log in, and obtained a valid JSESSIONID.

I then used this session ID to log in successfully, but I only see the following message:

“Good for you! You got this far. Here's your challenge code url: FLAG-xxe-”

The flag appears to be missing the remaining path/value.

Is this an issue on my side, or is it a known problem with the Docker version of the challenge?

Thank you.

[y0d4a]

Found it.
in folder hackerden, created .env with FLAG_SECRET=34c5f166f332305f242531647f078028
and in docker compose:
under host2:
environment:
- FLAG_SECRET

and under front, same in env:
- FLAG_SECRET

Now is working.