HackDalton: Get a Py 1

Problem:

I have a friend who owns a bakery, and he just released a new website, but he's a bit worried about the security. Could you check it out for him?

Hints

1. Read about Server Side Template Injection.
2. Try gaining access to the Flask Config Object.

Look at the writeup here.