[
{
email: 'some-email'
}
]
$.ajax('/user/emails', {
'complete': function(response) {
parsedResponse = JSON.parse(response.substr(9));
}
});
Array = function(data) {
// Upload contents of data to attacker's server
};
<script src="/user/emails" type="text/javascript"></script>