if filename.endswith(".xz"):
return flask.send_from_directory("logs", filename,
mimetype="application/octet-stream")
- filename += ".xz"
- return flask.send_file(lzma.open(flask.safe_join("logs", filename), "rb"),
- mimetype="text/plain")
+ filename = flask.safe_join("logs", filename + ".xz")
+ try:
+ return flask.send_file(lzma.open(filename, "rb"),
+ mimetype="text/plain")
+ except FileNotFoundError:
+ raise werkzeug.exceptions.NotFound()