Steps to reproduce:
Edit My Contact Data:
- first name:
' onmouseover=alert(1) data-first='
- last name:
- Create a new text document, and make sure it is saved.
- Click Review, check "Track Changes".
- Make another edit, it should show coloured now (as it is tracked).
- Click File, arrow next to "Save in Drive", then "Save as template". Click OK.
- The new template should open, hover over the added text to trigger the payload.
Steps 4 and 5 can be replaced with closing the current file and reopening it.