OWASP ZAP reported “alert(1);” XSS vulnerability, but no popup showed up

问题

OWASP ZAP reported “alert(1);” XSS vulnerability, but we could not get pop up in browser. Is this just a false positive?

The HTML surrounding the injected attack is:

<script type="text/javascript">
  DataSet.FilterBuilder.QueryValuesDictionary['57_ctl00'] = ;alert(1);;
</script>

来源：https://stackoverflow.com/questions/29223275/owasp-zap-reported-alert1-xss-vulnerability-but-no-popup-showed-up