False Positive - Path Traversal

[njmulsqb]

Reporting the FP as per https://www.zaproxy.org/faq/how-do-i-handle-a-false-positive/

ZAP is triggering the path traversal alert which is a false-positive.

The request is to the login form and the response contains highlighted content from JS script. The JS script is huge and it is completely highlighted. The evidence is etc and it is in a string like this

I have saved the session file with me, if you need more information to diagnose the problem let me know.

[psiinon]

Ow. Yeah, we should try to avoid matching that sort of response...