I’ve moved your post to the section on reporting false-positives.
can you please provide a complete code sample?