XSS and Encoded Script Injection via HTML/JavaScript Payload - ATR-2026-00497 (be76f284-2391-5c1d-92fa-b03bf26eee34)
Detects XSS (Cross-Site Scripting) and encoded script injection payloads submitted as user input to AI agents. Attackers inject these payloads hoping the agent will render or reproduce the malicious HTML/JavaScript in a context where it executes (browser, web UI, or rendered markdown). Covers: inline script injection, javascript: URI in img/a tags, String.fromCharCode encoding to bypass keyword filters, external script src loading, HTML entity encoded XSS, onerror/onload event handler injection, and data: URI payloads. Generalised from garak 'encoding' probe corpus cluster 'mixed_unassigned' - XSS subset. NOTE: The ethnic slur samples from the original garak corpus are excluded from this rule as they belong to a distinct hate-speech detection category, not XSS detection.