hugo/media
Bjørn Erik Pedersen 44954497bc
Always use content to resolve content type in resources.GetRemote
This is a security hardening measure; don't trust the URL extension or any `Content-Type`/`Content-Disposition` header on its own, always look at the file content using Go's `http.DetectContentType`.

This commit also adds ttf and otf media type definitions to Hugo.

Fixes #9302
Fixes #9301
2021-12-17 09:50:28 +01:00
..
testdata Always use content to resolve content type in resources.GetRemote 2021-12-17 09:50:28 +01:00
docshelper.go
mediaType.go Always use content to resolve content type in resources.GetRemote 2021-12-17 09:50:28 +01:00
mediaType_test.go Always use content to resolve content type in resources.GetRemote 2021-12-17 09:50:28 +01:00