steal cookie - eval(code, window.__proto__) without data: url
Test fails if alert showing cookie appears
moz_bug_r_a4