This page is NOT listed in web_accessible_resources.
web_accessible_resources
If you are seeing this in a tab as the result of navigating to http://127.0.0.1:8080/victim, the WAR contract has been bypassed.
http://127.0.0.1:8080/victim
Location: