Not clear how it can work at all. CFLOCATION accepts URL
(virtual path). Did you mean CFCONTENT?
In general, how client's browser treats the content is
defined by the "Content-Disposition" HTTP header that you can add
with CFHEADER. By default, it is "inline" - should be displayed in
the browser, rather than saved.