在response.binarywrite上强化跨站点scriting

Question

当我使用fortify扫描代码时，它会在以下代码中显示跨站点脚本漏洞

Response.ContentType = "Image/PNG";
Response.Headers.Add("Content-Disposition", "attachment; filename=Logo");
Response.Headers.Add("Content-Security-Policy", "reflected-xss");
Response.BinaryWrite(data.LogoFileData);
Response.Flush();
Response.Close();
Response.End();