hugo/tpl/transform
Bjørn Erik Pedersen 44954497bc
Always use content to resolve content type in resources.GetRemote
This is a security hardening measure; don't trust the URL extension or any `Content-Type`/`Content-Disposition` header on its own, always look at the file content using Go's `http.DetectContentType`.

This commit also adds ttf and otf media type definitions to Hugo.

Fixes #9302
Fixes #9301
2021-12-17 09:50:28 +01:00
..
init.go
init_test.go
remarshal.go
remarshal_test.go
transform.go
transform_test.go Add some basic security policies with sensible defaults 2021-12-16 09:40:22 +01:00
unmarshal.go Always use content to resolve content type in resources.GetRemote 2021-12-17 09:50:28 +01:00
unmarshal_test.go