FP in C# XSS Sink

**Description of the false positive**

Use of asp-route-{parameter} in cshtml documents are url encoded, preventing breakout from string and thus preventing XSS despite the use of WriteLiteral in the compiled code.

**Code samples or links to source code**
```csharp


```

Start by reviewing the issue's C# and cshtml samples alongside the linked MRVA result. Locate the CodeQL query and tests that classify asp-route-{parameter} as an XSS sink; done means this encoded route usage is no longer reported while genuine XSS cases remain covered.

Do mô hình lập chỉ mục viết ra từ nội dung của issue.