Bjørn Erik Pedersen 44954497bc

Always use content to resolve content type in resources.GetRemote ...

This is a security hardening measure; don't trust the URL extension or any `Content-Type`/`Content-Disposition` header on its own, always look at the file content using Go's `http.DetectContentType`.

This commit also adds ttf and otf media type definitions to Hugo.

Fixes #9302
Fixes #9301

2021-12-17 09:50:28 +01:00

..

init_test.go

Fix error handling for the time func alias

2021-08-01 13:39:30 +02:00

init.go

Fix error handling for the time func alias

2021-08-01 13:39:30 +02:00

remarshal_test.go

Implement XML data support

2021-12-02 17:30:36 +01:00

remarshal.go

Add Goldmark as the new default markdown handler

2019-11-23 14:12:24 +01:00

transform_test.go

Add some basic security policies with sensible defaults

2021-12-16 09:40:22 +01:00

transform.go

tpl/transform: Optional options for highlight func

2021-12-07 11:26:56 +01:00

unmarshal_test.go

Implement XML data support

2021-12-02 17:30:36 +01:00

unmarshal.go

Always use content to resolve content type in resources.GetRemote

2021-12-17 09:50:28 +01:00