c# - 网页中与脚本相关的 HTML 标记的不当中和（基本 XSS）（CWE ID 80）用于 response.BinaryWrite

Question

我尝试通过对文件名应用编码但仍然在response.BinaryWrite(data);

下面是我的代码：

                    WebClient req = new WebClient();
                    HttpResponse response = HttpContext.Current.Response;
                    response.Clear();
                    response.ClearContent();
                    response.ClearHeaders();
                    response.Buffer = true;
                    response.AddHeader("Content-Disposition", "attachment;filename=\"" + XSSSec.Encoder.HtmlEncode(FileName) + "\"");
                    byte[] data = req.DownloadData(FilePath);
                    response.BinaryWrite(data);
                    Response.Flush();
                    Response.SuppressContent = true;

有什么建议可以解决这个问题吗？