C#: False positive

**Description of the false positive**

Missing function level access control (cs/web/missing-function-level-access-control) is detected when attribute is applied in startup.

**Code samples or links to source code**

```
services
.AddControllers(options =>
{
options.Filters.Add(new AuthorizeFilter());
}
```

Start with the C# query cs/web/missing-function-level-access-control and reproduce it using the AddControllers startup snippet with an AuthorizeFilter. Inspect why the startup-level filter is reported, then verify that this example is no longer detected while the query still identifies genuine missing function-level access control.

Rédigé par le modèle d'indexation à partir du texte de l'issue.