I have a small project which has to response some files. I know that using nginx
will be better decision but that files a really small.
Part of my program:
You need to set a Content-Disposition: attachment; filename=....
HTTP header for the browser to use the correct filename.
You can have send_file()
set this header for you by setting the as_attachment=True
argument. The filename is then taken from the file object you passed in. Use the attachment_filename
argument to explicitly set a different filename:
return send_file(os.path.join(filepath, filename), as_attachment=True)
From the flask.send_file documentation:
as_attachment
– set toTrue
if you want to send this file with aContent-Disposition: attachment
header.attachment_filename
– the filename for the attachment if it differs from the file’s filename.
You may want to use the flask.send_from_directory() function instead. That function first ensures that the filename exists (raising a NotFound
if not), and ensures that the filename doesn't contain any ..
relative elements that might be used to 'escape' the directory. Use this for all filenames taken from untrusted sources:
return send_from_directory(filepath, filename, as_attachment=True)