Robot Filter — crawler policy
Inspect the local robots policy and identify the path that should not be treated as a security boundary.
User-agent: *\nDisallow: /private-preview\nlesson: disallow is not an access control
Attribution: Adapted from Crate-CTF, 2024/web/Robotfilter, under the MIT License. The GisVuln flag and fixture are new. See source details.
Self-contained training page; no original challenge server is contacted.