ok. i did my best with the short time i had.
i made some changes to the way "no download" is handled, to reflect its designed nature.
my purpose was not to improve it, but to make it coherent with how it was thinked and documented (was "let download").
if you have time, please check the changes in the source (build 255) and report if there's a possibility to break the security.