http://www.example.com/fuck<script>alert(document.cookie</script>