feat: implement MIME type blacklist for MIMEtypes that shouldn't be allowed to navigate and execute HTML/JS

[jkadamczyk]

Summary by CodeRabbit

• Bug Fixes

  • MIME type validation prevents unsafe or non-displayable content from rendering in web views; such content is now offered for download instead.
  • Improved extraction and handling of Content-Type headers during navigation.

• Chores

  • Added patch release metadata for the package.

_{✏️ Tip: You can customize this high-level summary in your review settings.}

[coderabbitai]

📝 Walkthrough

Walkthrough

Added MIME type safety validation to WebView navigation policy: Content-Type is extracted from HTTP responses, normalized, and compared against a static blocklist. Unsafe MIME types now trigger the existing file-download event (when configured) and cancel navigation; this integrates with attachment and canShowMIMEType checks.

Changes

Cohort / File(s)	Summary
MIME Type Safety Validation apple/RNCWebViewImpl.m	Added helper to normalize and check Content-Type against a static unsafe MIME-type list. Integrated this check into navigation policy alongside attachment and canShowMIMEType logic; if unsafe, emit file-download event (when configured) and cancel navigation.
Release Changeset .changeset/calm-taxis-poke.md	Added changeset for a patch release documenting the MIME type blacklist implementation.

🚥 Pre-merge checks | ✅ 3

✅ Passed checks (3 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The pull request title accurately describes the main change: implementing a MIME type blacklist to prevent unsafe MIME types from navigating and executing HTML/JS, which is reflected throughout the changeset.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[alexz-phantom]

As always with these kinds of things there may be evasions, but this is a definite point improvement. Thanks!