Rules: Inject alert command.
Rules: Steal the localStorage from this page by sending them to your website
Rules: test in admin.php