Official Sink Discussion

Is the foothold related to modifying request? The not* help me to debug it, but I can not figure how to leverage this attack technique to be something usefull.