[1.4.x] Prevented views.static.serve() from using large memory on large files.

      This is a security fix. Disclosure following shortly.