xSS

javascript:alert(document.cookie);