I am a little concerned about this blanket `catch` statement, since it can potentially be used to silently swallow a real error that we might want reported. One solution, which solves both this and the aforementioned security concern, is to have a separate directory for static views, e.g. `/views/static`, read the filenames in that directory at startup, and whitelist against them in this middleware. That way you wouldn't need the blanket `catch`, and the aforementioned security risk will be mitigated since you're using a whitelist. Aside from that, a separate subdirectory for static views might also be helpful organizationally.