message: Run XXE tests in sequence and with wait time
  (for the 2sec timeout to determine "DoS" on
  the server and set the challenge as solved)
diff: @@ -64,11 +64,8 @@ describe('/#/complain', () => {
  cy.get('#file').selectFile('test/files/xxeForWindows.xml')
  cy.get('#submitButton').click()
  }
  - })
  - })
  -
  + }).then((disableOnContainerEnv) => {
  it('should be possible to retrieve file from Linux server via .xml upload with XXE attack', () => {
  - cy.task('disableOnContainerEnv').then((disableOnContainerEnv) => {
  if (!disableOnContainerEnv) {
  cy.get('#complaintMessage').type('XXE File Exfiltration Linux!')
  cy.get('#file').selectFile('test/files/xxeForLinux.xml')
  @@ -78,29 +75,30 @@ describe('/#/complain', () => {
  })
  })
  })
  + })
  describe('challenge "xxeDos"', () => {
  - it('should be possible to trigger request timeout via .xml upload with Quadratic Blowup attack', () => {
  + it('should be possible to trigger request timeout via .xml upload with dev/random attack', () => {
  cy.task('disableOnContainerEnv').then((disableOnContainerEnv) => {
  if (!disableOnContainerEnv) {
  cy.get('#complaintMessage').type('XXE Quadratic Blowup!')
  - cy.get('#file').selectFile('test/files/xxeQuadraticBlowup.xml')
  + cy.get('#file').selectFile('test/files/xxeDevRandom.xml')
  cy.get('#submitButton').click()
  + cy.wait(2000) // Wait for timeout of XML parser
  }
  - })
  - })
  -
  - it('should be possible to trigger request timeout via .xml upload with dev/random attack', () => {
  - cy.task('disableOnContainerEnv').then((disableOnContainerEnv) => {
  + }).then((disableOnContainerEnv) => {
  + it('should be possible to trigger request timeout via .xml upload with Quadratic Blowup attack', () => {
  if (!disableOnContainerEnv) {
  cy.get('#complaintMessage').type('XXE Quadratic Blowup!')
  - cy.get('#file').selectFile('test/files/xxeDevRandom.xml')
  + cy.get('#file').selectFile('test/files/xxeQuadraticBlowup.xml')
  cy.get('#submitButton').click()
  + cy.wait(2000) // Wait for timeout of XML parser
  cy.expectChallengeSolved({ challenge: 'XXE DoS' })
  }
  })
  })
  })
  + })
  describe('challenge "arbitraryFileWrite"', () => {
  it('should be possible to upload zip file with filenames having path traversal', () => {
  