Co-Authored-By: Claude Sonnet 5.5 <[email protected]> Claude-Session: https://claude.ai/code/session_017ic4b7rnC7jppGGdHGESvy
7 lines
318 B
Plaintext
7 lines
318 B
Plaintext
# Trusting the sender's Content-Type vs pinning it
|
|
|
|
naive writer : key naive/upload.png Content-Type = text/html (sender said so; the .png suffix did not matter)
|
|
ImageStore : the verifier refuses these bytes first:
|
|
not-an-image: no known image signature in the first bytes
|
|
objects under naive/ : 1
|