import json


def rule(event):
    if all(
        [
            event.deep_get("cs-method", default="") == "GET",
            any(
                [
                    "=<script>" in json.dumps(event.to_dict()),
                    "=%3Cscript%3E" in json.dumps(event.to_dict()),
                    "=%253Cscript%253E" in json.dumps(event.to_dict()),
                    "<iframe " in json.dumps(event.to_dict()),
                    "%3Ciframe " in json.dumps(event.to_dict()),
                    "<svg " in json.dumps(event.to_dict()),
                    "%3Csvg " in json.dumps(event.to_dict()),
                    "document.cookie" in json.dumps(event.to_dict()),
                    "document.domain" in json.dumps(event.to_dict()),
                    " onerror=" in json.dumps(event.to_dict()),
                    " onresize=" in json.dumps(event.to_dict()),
                    ' onload="' in json.dumps(event.to_dict()),
                    "onmouseover=" in json.dumps(event.to_dict()),
                    "${alert" in json.dumps(event.to_dict()),
                    "javascript:alert" in json.dumps(event.to_dict()),
                    "javascript%3Aalert" in json.dumps(event.to_dict()),
                ]
            ),
            not event.deep_get("sc-status", default="") == 404,
        ]
    ):
        return True
    return False
