A feedback form pings your domain to test connectivity — but shows no output. Confirm injection with sleep, then exfiltrate the flag.
