Age | Commit message (Collapse) | Author | |
---|---|---|---|
2021-12-22 | media: Also consider extension in FromContent | Bjørn Erik Pedersen | |
As used in `resources.GetRemote`. This will now reject image files with text and text files with images. | |||
2021-12-22 | media: Add missing BMP and GIF to the default MediaTypes list | Bjørn Erik Pedersen | |
2021-12-22 | media: Add PDF MIME type | Bjørn Erik Pedersen | |
2021-12-17 | Always use content to resolve content type in resources.GetRemote | Bjørn Erik Pedersen | |
This is a security hardening measure; don't trust the URL extension or any `Content-Type`/`Content-Disposition` header on its own, always look at the file content using Go's `http.DetectContentType`. This commit also adds ttf and otf media type definitions to Hugo. Fixes #9302 Fixes #9301 |