You can call this URL with a username querystring parameter, anything you put there will be shown on the page.
Can you think of a way to exploit this?
HINT: This is the directory listing for this app.
./
prestart.sh
main.py
flag.txt
Dockerfile
templates/
index.html