<script>alert(document.cookie);</script>