The scanner module reports XML and XPath false positives when it finds certain strings (eg xmlschema  ajaxpath) in the the response of automated scans  but it does not consider when those same strings were already present in the original response to unaltered requests