# 1224: Fireplace Generator
| Name | Authors | Category |
| -------------------------------------------------------------------------- | ------------------------------------ | ----------- |
| [Intigriti December Challenge (2024)](https://challenge-1224.intigriti.io) | [Jorian](https://twitter.com/J0R1AN) | Cache, mXSS |
## Challenge Description
> Find the FLAG and win Intigriti swag! 🏆
## Summary
1. Find the special `ENDCI--->` cache format delimiter to remove the start of the response until inside the `id=` attribute. This gets you out of the attribute
2. Bypass the `xss_clean()` function using a Mutation XSS with the allowed `xmp` tag: `<![CDATA[<p id=']]>