This is a cross-site context.
document.cookie is