Hi Lorna,
Checking the Content-Type makes a lot of sense. Actually in my case i also control the incoming request but i want to get a good understanding of things before i burn myself ;-)
Thanks alot!