I would say it is a bad detection, firstly based on the name I would think that the JS- is for javascript and web shield doesn’t use javascript. Unless they are having a whinge about the http redirect to a localhost port, which again is pretty poor.