We opened the image in a new tab and were able to see the image is loaded by the filename parameter:

We viewed the /etc/passwd file by replacing the filename parameter value:

Accessing the passwd file solved the lab: