<script>alert(document.cookie)</script>