Spotify's CloudFront serves some covers as application/octet-stream and pippa.io sends no Content-Type at all; both are JPEGs, which browsers sniff and show, but /api/art refused them with a 502 and the podcast showed its initials. An untyped or octet-stream answer is now read and checked for JPEG, PNG, GIF or WebP magic; anything else, SVG included, is still refused. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>