Cross site scripting in Ajax Request

firewall

#1

We have a web application in asp.net, cloudflare blocking all request having javascript code in request but if request is made through ajax then its not blocked.