XSS Attack Attempt - Script Tag Event Handler or JavaScript URI in HTTP

Ankit Mehta@Secvyn

•updated Jun 30, 2026•0•0•1

This rule detects potential Cross-Site Scripting (XSS) attack attempts by inspecting HTTP requests for common malicious patterns, such as embedded script tags, JavaScript URIs, or HTML event handlers like 'onload' and 'onerror'. These payloads are often used by attackers to execute arbitrary code within a user's browser session.