Challenge-12: Insecure Login - remove hardcoded plaintext credentials - #489

Closed

beanbeah wants to merge 2 commits into

OWASP-CTF:dc34-ctffrom

beanbeah:ctf/r2-challenge-challenge-12-insecure-login

Commits on Aug 9, 2026

fix(build): bump lombok to 1.18.46 for JDK 25 CI compatibility

beanbeah
and
claude
committed
a30f123
Fix insecure login: replace hardcoded plaintext credentials with runtime secret + constant-time compare

beanbeah
and
claude
committed
02b0bc7