[🐛] Hacking Instructor doesn't take into account a custom domain

🐛 Bug report

Description

Hacking Instructor doesn’t take into account a custom domain.

Here’s a part of my custom config:

application:
  domain: "example.com"

Take the “Login Jim” challenge instructor script. At the stage of inputting Jim’s email, the instructor script expects “[e-mail]” and not “[e-mail]”.

Looking at the source code, looks like there’s already a TODO: https://github.com/juice-shop/juice-shop/blob/57b5d56da23104a7040371eb919147f917386950/frontend/src/hacking-instructor/challenges/loginJim.ts#L67

I’m planning to use Juice Shop as a fun learning CTF for the developers in my company, and, since they’re not very experienced with hacking and security, the Hacking Instructor scripts are a really good feature, as it could give a nice boost to start solving challenges.

[bkimminich]

With v13.0.0 this is now supported via an extra option to waitForInputToHaveValue:

resolved: waitForInputToHaveValue('#email', '[e-mail]', { replacement: ['juice-sh.op', 'application.domain'] })

[github-actions[bot]]

This thread has been automatically locked because it has not had recent activity after it was closed. 🔒 Please open a new issue for regressions or related bugs.