···245245246246 // Infer MIME type from content bytes rather than headers; this is fallible
247247 // and falls back to application/octet-stream if the type is unrecognised.
248248+ //
249249+ // TODO: Merge this with the download stream process to reject bad MIMEs
250250+ // early?
248251 let mime_type = sniff_mime(&validated_bytes);
249252 if !is_mime_allowed(&mime_type, allowed_mimetypes) {
250253 tracing::debug!("blob was inferred to be a disallowed mime type: {mime_type}");