This set of challenges is about Cross Site Scripting (XSS). The goal is to craft a payload to exploit a vulnerable web application. Mainly, this challenges focus on how to bypass Content Security Policy (CSP) and other mitigations.
Challenges (in rough order of subjective difficulty):