HTTP响应中HP Fortify的标头操作问题[java]

I'm trying to fix a "Header Manipulation" issue returned bu HP Fortify Scan for this code. I don't know if files are already validated during upload (I think not). I tried to use a RegEx to validate filename with no success. Anyone can help me? I'm trying to fix a "Header Manipulation" issue