MIME 类型速查
developer · v1.0.0 · 纯前端,数据不出浏览器
| 扩展名 | Content-Type | 说明 | |
|---|---|---|---|
| html | text/html; charset=utf-8 | ||
| css | text/css; charset=utf-8 | ||
| js | text/javascript; charset=utf-8 | 服务端应显式设置,避免依赖 sniffing | |
| mjs | text/javascript; charset=utf-8 | ||
| json | application/json; charset=utf-8 | ||
| txt | text/plain; charset=utf-8 | ||
| csv | text/csv; charset=utf-8 | ||
| xml | application/xml | ||
| application/pdf | |||
| png | image/png | ||
| jpg / jpeg | image/jpeg | ||
| gif | image/gif | ||
| webp | image/webp | ||
| svg | image/svg+xml | SVG 可含脚本;用作上传时务必按不可信内容处理 | |
| ico | image/x-icon | ||
| mp3 | audio/mpeg | ||
| wav | audio/wav | ||
| ogg | audio/ogg | ||
| mp4 | video/mp4 | ||
| webm | video/webm | ||
| woff | font/woff | ||
| woff2 | font/woff2 | ||
| ttf | font/ttf | ||
| zip | application/zip | ||
| gz | application/gzip | ||
| tar | application/x-tar | ||
| wasm | application/wasm | ||
| md | text/markdown; charset=utf-8 | ||
| yaml / yml | application/yaml | ||
| webmanifest | application/manifest+json | ||
| form(urlencoded) | application/x-www-form-urlencoded | 表单默认编码 | |
| multipart/form-data | multipart/form-data | 含文件上传时必须使用 |
安全提醒:不要依赖浏览器的内容嗅探。上传文件时应按允许列表校验 MIME 与扩展名, 并把
Content-Disposition 设为 attachment,避免 SVG/HTML 被当作页面执行。