Web cache poisoning with an unkeyed header - Web Security Academy Lab Solution