Function _safe_urlopen

Scripts/ButSystem.py:12735–12738

urlopen with strict redirect + host checks (SSRF hardening).

(req: urllib.request.Request, timeout: int = 12)

        rel = safe_relpath(rel); target = abs_user_path(current_user(), rel)
        if not rel or not os.path.exists(target): abort(404)
        if os.path.isdir(target):
            zip_path = _zip_paths(current_user(), [rel], os.path.basename(target)); _log_file_activity(current_user(), "folder_downloaded", rel); return _send_temporary_zip(zip_path, os.path.basename(target) + ".zip")
        mime = guess_mime(os.path.basename(target)); _log_file_activity(current_user(), "file_downloaded", rel, human_size(os.path.getsize(target)))
        if is_encrypted_file(target):
            response = Response(aesgcm_decrypt_generator(target), mimetype=mime); response.headers["Content-Disposition"] = f'attachment; filename="{os.path.basename(target)}"'
        else: response = send_file(target, mimetype=mime, as_attachment=True, download_name=os.path.basename(target), conditional=True, max_age=0)
        response.headers["Cache-Control"] = "no-store"; return response