hugo/resources
Bjørn Erik Pedersen 44954497bc
Always use content to resolve content type in resources.GetRemote
This is a security hardening measure; don't trust the URL extension or any `Content-Type`/`Content-Disposition` header on its own, always look at the file content using Go's `http.DetectContentType`.

This commit also adds ttf and otf media type definitions to Hugo.

Fixes #9302
Fixes #9301
2021-12-17 09:50:28 +01:00
..
images Always use content to resolve content type in resources.GetRemote 2021-12-17 09:50:28 +01:00
internal all: Format code with gofumpt 2020-12-03 13:12:58 +01:00
jsconfig all: Format code with gofumpt 2020-12-03 13:12:58 +01:00
page Allow user to handle/ignore errors in resources.Get 2021-12-10 11:10:41 +01:00
postpub Always use content to resolve content type in resources.GetRemote 2021-12-17 09:50:28 +01:00
resource Allow user to handle/ignore errors in resources.Get 2021-12-10 11:10:41 +01:00
resource_factories Always use content to resolve content type in resources.GetRemote 2021-12-17 09:50:28 +01:00
resource_transformers Add some basic security policies with sensible defaults 2021-12-16 09:40:22 +01:00
testdata Add custom font support to images.Text 2021-12-07 16:53:02 +01:00
errorResource.go Allow user to handle/ignore errors in resources.Get 2021-12-10 11:10:41 +01:00
image.go hugofs: Make FileMeta a struct 2021-07-15 17:14:26 +02:00
image_cache.go hugofs: Make FileMeta a struct 2021-07-15 17:14:26 +02:00
image_extended_test.go resources: Regenerate image golden testdata 2021-07-07 17:25:14 +02:00
image_test.go Add custom font support to images.Text 2021-12-07 16:53:02 +01:00
post_publish.go Add basic "post resource publish support" 2020-04-07 21:59:20 +02:00
resource.go Always use content to resolve content type in resources.GetRemote 2021-12-17 09:50:28 +01:00
resource_cache.go all: Format code with gofumpt 2020-12-03 13:12:58 +01:00
resource_cache_test.go Improve the server assets cache invalidation logic 2019-08-13 18:09:46 +02:00
resource_metadata.go Misc config loading fixes 2021-06-14 17:00:32 +02:00
resource_metadata_test.go all: Format code with gofumpt 2020-12-03 13:12:58 +01:00
resource_spec.go Always use content to resolve content type in resources.GetRemote 2021-12-17 09:50:28 +01:00
resource_test.go resources: Use default math/rand.Source for concurrency safety 2021-09-19 12:18:30 +02:00
testhelpers_test.go Add some basic security policies with sensible defaults 2021-12-16 09:40:22 +01:00
transform.go Allow user to handle/ignore errors in resources.Get 2021-12-10 11:10:41 +01:00
transform_test.go resources: Regenerate image golden testdata 2021-07-07 17:25:14 +02:00