XSS

[jslink](javascript:alert(document.domain))