Pretty self-explanatory, upon opening the JS script you will be greeted with this: alt text You can literally rebuild the flag from here, in plaintext. This goes to show how client-side validations can be easily broken and you should never rely on them.