never serve pasted files in browser

.dockerignore

@@ -4,4 +4,5 @@ prayer-generator
 !prayer-generator/xml
 !prayer-generator/license
 grocery-transactions
+files/
 

rest/pyapi.py

@@ -106,7 +106,7 @@ def get_clip(filename):
     if isinstance(ret, HTTPError):
         return ret
 
-    return static_file(path, root='rest/static/files')
+    return static_file(path, root='rest/static/files', download=True)
 
 
 @route('/upload', method=['GET', 'POST'])

rest/validate.py

@@ -47,6 +47,8 @@ def validate(filename: str, tool: str, root='rest/static/files') -> bytes:
     ret = static_file('/'.join([filename,]*2) + '.file', root=root)
     if isinstance(ret, HTTPError):
         return abort(404, f"No such `{tool.title()}`: {filename}")
+    if ret.status_code == 304:
+        return ret
 
     if ret.content_length > CLIP_SIZE_LIMIT:
         return abort(418, f"{tool.title()} size exceeds {CLIP_SIZE_LIMIT}")