<html> <script src="payload.js"></script> <script src="exploit.js"></script> <body>pwning...</body> </html>