[SM03712] Client-side cross-site scripting warning

[wofung]

Hey,

Our build pipeline detect a CodeQL issue ([SM03712] Client-side cross-site scripting) in Microsoft internally for the following code

https://github.com/microsoft/fluentui/blob/8264ce0435583ae69c051f109388005be3c0de2b/packages/react/src/components/Nav/Nav.base.tsx#L390C8-L390C56

I thought your build pipeline would file a ticket. Can you double confirm if it is a false positive? If so, I can create a PR to put a CodeQL exclusion comment