I am able to inject this:
http://domain.com/search/songs/<img src='alert(document.cookie)' onerror='alert(document.cookie)'>
to the page HTML.
The onerror event is giving me the cookie on my latest updated Firefox.
But Chrome is sanitizing the HTML to this:
<img src="alert(document.cookie)" onerror="">
When I try to inject the script tag, the application is somehow sanitizing it.
I dont know if I should share the website on which I found this vulnerability here.
Please suggest me on how to make it work on Chrome.