Goal? "Flag Is Win" in an alert(ـ)! ಠ_ಠ
Note: no injection possible
Also: don't use automated tools, they won't help
Added: backend code is here
Solved by: