[Click me](javascript:alert(document.cookie))