OWASP ZAP reported “alert(1);” XSS vulnera

问题:

OWASP ZAP reported “alert(1);” XSS vulnerability, but we could not get pop up in browser. Is this just a false positive?

The HTML surrounding the injected attack is:

<script type="text/javascript">
  DataSet.FilterBuilder.QueryValuesDictionary['57_ctl00'] = ;alert(1);;
</script>