[jolmg]

The server response on clicking the link lacks a "Content-Type" header. I just thought I'd mention that in case the admin would be here and interested.

It's causing a download extension in my browser to show a download dialog on clicking the link. I don't think it's a bug in the extension, but rather a required behavior because of the limitations of extensions. The extension has no sure way to know what my browser's treatment of the response will be after it inspects the body content to guess the type, so the safer thing to do in its case is to show the dialog.

I don't think Content-Type is required by HTTP, but it's pretty rare for servers to not include it. Might be good to add it if only in interest of the Robustness Principle[1].

[1] https://en.wikipedia.org/wiki/Robustness_principle