I'm offering an html file up for download. And in debug mode the toolbar is injected. Perhaps check for content-disposition and attachment too?