Plone.namedfile

------------------

Bug fixes:


- Fix: Upload a svg without width and height set dobri1408 (161)

------------------

New features:


- Improve contenttype detection logic for unregistered but common types.

Change get_contenttype to support common types which are or were not registered
with IANA, like image/webp or audio/midi.

Note: image/webp is already a IANA registered type and also added by
Products.MimetypesRegistry.
[thet] (157-2)
- Support for allowed media types.

Support to constrain files to specific media types with a "accept" attribute on
file and image fields, just like the "accept" attribute of the HTML file input.

Fixes: 157
[thet] (157)

------------------

Bug fixes:


- Be more strict when checking if mimetype is allowed to be displayed inline.
[maurits] (1167)

------------------

Bug fixes:


- Fix calculation of file modification time. davisagli (153)

------------------

Bug fixes:


- Fix stored XSS (Cross Site Scripting) for SVG images.
Done by forcing a download instead of displaying inline.
See `security advisory <https://github.com/plone/plone.namedfile/security/advisories/GHSA-jj7c-jrv4-c65x>`_.
[maurits] (1)

------------------

New features:


- Add internal modification timestamp with fallback to _p_mtime.
[mathias.leimgruber] (149)
- Use new internal modification timestamp as part of the hash key for scales.
[mathias.leimgruber] (150)