Test <img src=x onerror=alert(document.cookie)> http://example.com