X-XSS-защита: 1; блок режима не работает против отраженного XSS

---

EclinicEnterprise/Reserved.ReportViewerWebControl.axd?ReportSession=w1b3lwqaw03ktl554pdlvimp&ControlID=d963fd5abf474594967c70a9f9af2f7a&Culture=1033&UICulture=1033&ReportStack=1&OpType=SessionKeepAlive&TimerMethod=KeepAliveMethodcntPlcHolder_ReportViewer1TouchSession0&CacheSeed=Fri%20Apr%2013%202018%2011%3A22%3A24%20GMT%2B0530%20(India%20Standard%20Time) HTTP/1.1

Doing Attack from above response when we show report in Microsoft Report Viewer.

Is any solution for this?

Что я уже пробовал:

X-XSS-Protection: 1; mode block

в webconfig.

---