Jul 4, 2021 · ... q=0.9,image/webp,*/*;q=0.8. Accept-Language ... <script src=/api/v1?callback=alert(1)></script> ... search?client=chrome&q=hello&callback=alert ...