Payloads Generated by XSStrike not suitable if URLDecoded.

[mansoorr123]

Scenario: XSStrike is generating paylod for as: /dvwa/vulnerabilities/xss_d/?default=%3Cscript%3Ealert%28%29%3C%2Fscript%3E

But dvwa in backend javascript uses decodeURI() which decodes above payload to: http://192.168.43.53/dvwa/vulnerabilities/xss_d/?default=

Thus XSSStrike payloads generated are showing false positive when above scenario(i.e. applicaytion javascript uses decodeURI). Also I have tested this scenario in mozilla firefox.