JavaScript Hijacking Issue in ASP.net web api

I am facing this issue in datareader object( SqlDataReader dr = cmd.ExecuteReader();),

con.Open();

            SqlDataReader dr = cmd.ExecuteReader();
            while (dr.Read())
            {

}

Kindly help me to fix the Issue.