Bjørn Erik Pedersen 44954497bc

Always use content to resolve content type in resources.GetRemote ...

This is a security hardening measure; don't trust the URL extension or any `Content-Type`/`Content-Disposition` header on its own, always look at the file content using Go's `http.DetectContentType`.

This commit also adds ttf and otf media type definitions to Hugo.

Fixes #9302
Fixes #9301

2021-12-17 09:50:28 +01:00

114 KiB

Raw History