This region is compiled by AngularJS 1.5. A template expression escapes the sandbox to JS: {{constructor.constructor('alert(document.domain)')()}}. Flag: flag{cwap_csti_angular_sandbox} once it fires.
CWAP Prep Labs · HackXpert Coaching · The XSS Rat · authorized lab use only