sss
javascript:alert(document.cookie="id="+escape("9"));
javascript:alert(document.cookie="id="+escape("9 and 1=1"));