http_static: fix reply data leak