- Views: 626
- Replies: 1
A collection of improvements to XF's attachment system.
SVG Support
Nginx X-Accel-Redirect (OPTIONAL)
This addon assumes the /internal_data folder exists within the webroot, and you do not have a 'deny all;' statement but instead use 'internal;' to secure the internal_data folder.
For example, XenForo is accessible from: /forum rather than then the webroot.
The following must be added to config.php:
Code:
$config['internalDataUrl'] = '/forum/internal_data';
Something similar to the nginx config may be required in your webserver:
Code:
location ^~ /forum/internal_data {
internal;
add_header Etag $upstream_http_etag;
add_header X-Frame-Options SAMEORIGIN;
add_header X-Content-Type-Options nosniff;
alias /path/to/internal_data;
}
To ensure you match how XenForo serves files, add the following headers into your website config for the internal_data folder:
Code:
add_header Etag $upstream_http_etag;
add_header X-Frame-Options SAMEORIGIN;
add_header X-Content-Type-Options nosniff;
New Permissions
Post Install Instructions
- Option to strip jpeg EXIF data
- SVG support
- Nginx's X-Accel-Redirect
- New Permissions for forum/conversations (Respects global attachment size & count limits):
- Attachment Size (kb).
- Maximum Attachment Count.
- Adds support for video stream via partial content requests
SVG Support
- Support for SVG attachments to be displayable as normal images.
Nginx X-Accel-Redirect (OPTIONAL)
- Enables the use of Nginx's X-Accel-Redirect header feature for attachment serving.
- This permits XenForo to-do validation and authentication, and offload the actual file serving to Nginx.
- After following Using DigitalOcean Spaces or Amazon S3 for file storage in XF 2.x attachments no longer show, you must follow the relevant FAQ entry!
This addon assumes the /internal_data folder exists within the webroot, and you do not have a 'deny all;' statement but instead use 'internal;' to secure the internal_data folder.
For example, XenForo is accessible from: /forum rather than then the webroot.
The following must be added to config.php:
Code:
$config['internalDataUrl'] = '/forum/internal_data';
Something similar to the nginx config may be required in your webserver:
Code:
location ^~ /forum/internal_data {
internal;
add_header Etag $upstream_http_etag;
add_header X-Frame-Options SAMEORIGIN;
add_header X-Content-Type-Options nosniff;
alias /path/to/internal_data;
}
To ensure you match how XenForo serves files, add the following headers into your website config for the internal_data folder:
Code:
add_header Etag $upstream_http_etag;
add_header X-Frame-Options SAMEORIGIN;
add_header X-Content-Type-Options nosniff;
New Permissions
- Permits per-forum or conversation attachment size and count limits.
- Respects the global forum wide attachment size/count limits, with per-usergroup settings allowing smaller values.
- Due to how XF integer permissions work, 'unlimited' or '0' evaluate as no permission being set.
Post Install Instructions
- Add 'svg' file extension to the list of supported to allow svg files to be uploaded.
