I have following code in my page and our scanner keep showing it as DOM XSS
var hash= window.location.hash