Missions / Hidden in plain sight

Mission 6 of 6

Hidden in plain sight

Developers sometimes leave notes in a page's source code, thinking nobody will look. Attackers always look.

A secret word has been left in the source code of this page. Open the source (Ctrl+U on Windows, Cmd+Option+U on a Mac, or right-click and choose View Page Source) and find it.

What is the secret word?

The lesson: Anything sent to the browser can be read by anyone. Never put passwords, keys or secrets in page source, comments or JavaScript.