Please contact me with my email address for vulnerability consulting.

-Bug-

On your "Duskmourn: House of Horror | It's a Beautiful Day" webpage, you do not have to enter a passkey to view all of the door choices.

-Steps to reproduce-

1. -In Mozilla Firefox-

Go to: https://magic.wizards.com/en/news/magic-story/side-six-its-a-beautiful-day?utm_medium=playerinbox&utm_source=arena

1. Right-click the "Submit" button for the passkey.

2. Select Inspect(Q).

3. Under where it says "Once passkey is entered, reveal the following", there is a drop down beside "<div id="protectedContent">...</div>. Click it.

4. for each <p id=door... there are drop downs containing each of the 40 doors you can view.

-Remediation-

Make the supposed "protectedContent" server side instead of client side.

For further information on how to do that, please contact me directly.

Thanks.