Bjørn Erik Pedersen 44954497bc Always use content to resolve content type in resources.GetRemote ... This is a security hardening measure; don't trust the URL extension or any `Content-Type`/`Content-Disposition` header on its own, always look at the file content using Go's `http.DetectContentType`. This commit also adds ttf and otf media type definitions to Hugo. Fixes #9302 Fixes #9301		2021-12-17 09:50:28 +01:00
..
cast
collections	Add some basic security policies with sensible defaults	2021-12-16 09:40:22 +01:00
compare
crypto
data	Add some basic security policies with sensible defaults	2021-12-16 09:40:22 +01:00
debug
encoding
fmt
hugo
images
inflect
internal	Add resources.GetRemote	2021-12-17 09:33:51 +01:00
js
lang
math
openapi/openapi3
os	Add some basic security policies with sensible defaults	2021-12-16 09:40:22 +01:00
partials	Allow for return partials with falsy arguments (#9298)	2021-12-17 08:35:21 +01:00
path
reflect
resources	Always use content to resolve content type in resources.GetRemote	2021-12-17 09:50:28 +01:00
safe
site
strings
templates
time
tplimpl	Always use content to resolve content type in resources.GetRemote	2021-12-17 09:50:28 +01:00
transform	Always use content to resolve content type in resources.GetRemote	2021-12-17 09:50:28 +01:00
urls
template.go
template_info.go
template_test.go