Signals

xss-test-r1 · abuse_in_use · 2026-W30 · ai_model

This excerpt tries an attack: <script>alert('xss')</script> and <img src=x onerror="alert(1)"> should render as literal text, not execute.

A report is a signal produced by a system under unknown conditions. We publish patterns and excerpts; we do not claim verified testimony.