forked from tangled.org/core
Monorepo for Tangled — https://tangled.org

knotserver/jetstream: check content-type before adding keys

Changed files
+5
knotserver
+5
knotserver/jetstream.go
···
}
defer resp.Body.Close()
+
if ct := resp.Header.Get("Content-Type"); !strings.HasPrefix(ct, "text/plain") {
+
l.Error("unexpected content type", "content-type", ct)
+
return fmt.Errorf("unexpected content type: %s", ct)
+
}
+
plaintext, err := io.ReadAll(resp.Body)
if err != nil {
l.Error("error reading response body", "error", err)