• flamingos-cant (hopepunk arc)@feddit.ukOP
    link
    fedilink
    English
    arrow-up
    2
    ·
    4 days ago

    The HTTP headers can be wrong, the only definitive way to determine a file’s content type is to read it. This is why you can stick an image that has a mime type header of application/octet-stream in an img tag and it’ll mostly work. Most binary formats will have some kind of magic number at the start to help determine it.

    • Frezik@lemmy.blahaj.zone
      link
      fedilink
      English
      arrow-up
      4
      ·
      4 days ago

      Which is bad and wrong. Postel’s law has been considered a bad idea by Postel himself for a while. We shouldn’t let such fuzziness go through.

      • flamingos-cant (hopepunk arc)@feddit.ukOP
        link
        fedilink
        English
        arrow-up
        2
        ·
        4 days ago

        Meh, you shouldn’t need a sophisticated understanding of file formats and web server configuration to make a website, so some slack is imo a good thing. Maybe not as much as there is, but reading the head of an image file doesn’t seem that big a deal.

        • Frezik@lemmy.blahaj.zone
          link
          fedilink
          English
          arrow-up
          1
          ·
          4 days ago

          The unsophisticated solution is to map the file extension to the MIME type, which is done by default much of the time. If you do anything else, then we need to have a conversation about how.