The Web Inspect tool identified security vulnerability on ASP.NET MVC web app on some paths shown here:

/Content/
/Content/themes/base/images/
/Content/themes/
/Content/Images/
/profiler/results
/Account/Login
/Error/LogJavaScriptError/
/Content/themes/base/
/Content/Profile/

The app is an ASP.NET MVC web app, and accessed by Chrome browser and it will not have origin in request header. The path above seems to resources which is referred in the ASP.NET MVC web form and it will not have origin but web inspect tool expect it.

If I want to add origin, it can be done for all request to ASP.NET MVC which may not be a right solution.

Please advise what I could do.