有关文件下载IE安全警告：You can't disable the security warning. The browser will act like that whenever a file p_w_upload shows up in an HTTP response that's not related to an HTTP request made from a user-initiated event ("click" or form submit). You're getting the warning because you're making the HTTP request from the ajax response event handler, and the browser simply does not like that.

The only way to make the setup work is to make sure that you start the HTTP request from a "click" handler, or the "submit" handler for a form (or by having the actual form submit result in the file response).