Home
Xp
Agnd
Spkr
Spon
Reg
More
appsec2026 / experience

The Experience

Two formats. Pick a mode.

Secure Code Shootout — Live Preview

Spot the vuln, reveal the fix, earn XP.

VULNERABLE.JS
const q = `SELECT * FROM users WHERE id=${id}`;
db.query(q);
SECURE.JS
// press reveal to see the parameterized fix
Score: 0/1