hugo/resources/resource_factories/create
Bjørn Erik Pedersen 44954497bc
Always use content to resolve content type in resources.GetRemote
This is a security hardening measure; don't trust the URL extension or any `Content-Type`/`Content-Disposition` header on its own, always look at the file content using Go's `http.DetectContentType`.

This commit also adds ttf and otf media type definitions to Hugo.

Fixes #9302
Fixes #9301
2021-12-17 09:50:28 +01:00
..
create.go Add resources.GetRemote 2021-12-17 09:33:51 +01:00
remote.go Always use content to resolve content type in resources.GetRemote 2021-12-17 09:50:28 +01:00
remote_test.go Add resources.GetRemote 2021-12-17 09:33:51 +01:00