Netsparker detected that it's possible to control the
src attribute of
base tag in the HTML.
basetag. Whitelist it if the dynamic usage is necessary.