I get that the evil body essentially gets prefixed to the legitimate request, making the server generate the redirect, but this redirect is returned to the vict

I get that the evil body essentially gets prefixed to the legitimate request, making the server generate the redirect, but this redirect is returned to the victim. The victim then makes a request to the malicious server, and this request should not contain cookies because the origin is different. How do the cookies get to the attacker?