- Added validation to reject assets with MIME type text/html, returning an invalidContentType error.
- Users must upload HTML files using application/octet-stream; browsers will not render them by default.
- Existing white‑listed customers retain functionality; others should contact support for whitelist.