Initial QSfera import

Server/devtools/deployments/service_policies/policies/postprocessing.rego

@@ -0,0 +1,17 @@
+package postprocessing
+
+import future.keywords.if
+import data.utils
+
+default granted := true
+
+granted = false if {
+    not utils.is_extension_allowed(input.resource.name)
+}
+
+granted = false if {
+    bytes := qsfera.resource.download(input.resource.url)
+    mimetype := qsfera.mimetype.detect(bytes)
+
+    not utils.is_mimetype_allowed(mimetype)
+}