A websec challenge for the Mozilla CTF 2011