I think anything you do in that situation (without an explicit user action) may legitimately be blocked now by more and more browser "popup blockers", so perhaps you want to re-design your solution.



Have the user explicitly click on a link, which then opens a new window (target-"_blank"), displaying the Microsoft .doc content of the response from the servlet.