Cross-site scripting payloads for browser-side data access and exfiltration.