forked from
tangled.org/core
This repository has no description
knotserver/jetstream: check content-type before adding keys
author
Anirudh Oppiliappan
date
(Feb 5, 2025, 9:48 AM +0200)
commit
24664ea1
24664ea16d74e652d48254c130902366270c46a5
parent
deb81e57
deb81e57a6b3bc2034f0d48ecd5561371e73bf4b
+5
+5
knotserver/jetstream.go
+5
knotserver/jetstream.go
···
86
86
}
87
87
defer resp.Body.Close()
88
88
89
+
if ct := resp.Header.Get("Content-Type"); !strings.HasPrefix(ct, "text/plain") {
90
+
l.Error("unexpected content type", "content-type", ct)
91
+
return fmt.Errorf("unexpected content type: %s", ct)
92
+
}
93
+
89
94
plaintext, err := io.ReadAll(resp.Body)
90
95
if err != nil {
91
96
l.Error("error reading response body", "error", err)