XENFORO 2.3 [Xon] Attachment Improvements By Xon 2.6.1

A collection of improvements to XF's attachment system.

• Byte-range support for resumable downloads
  • Primarily designed for partial content requests for streaming videos, but will work with any file
  • Dependant on the filesystem /internal_data being local, as the remote file system APIs do not easily support this feature
• Improve drag&drop editor support.
  • Stock XenForo/Froala uses "move" which can result in unexpected content deletion.
  • Tint the active editor's boarder when dragging items over it, and show a file upload symbol over it.
• Option to strip jpeg EXIF data
• SVG support
• Nginx's X-Accel-Redirect
• New Permissions for forum/conversations (Respects global attachment size & count limits):
  • Attachment Size (kb).
  • Maximum Attachment Count.
• Adds support for video stream via partial content requests

SVG Support
Support for SVG attachments to be displayable as normal images.

Nginx X-Accel-Redirect (OPTIONAL)

Enables the use of Nginx's X-Accel-Redirect header feature for attachment serving.

This permits XenForo to-do validation and authentication, and offload the actual file serving to Nginx. This feature is not particularly well documented, but some info found here.

After following Using DigitalOcean Spaces or Amazon S3 for file storage in XF 2.x attachments no longer show, you must follow the relevant FAQ entry!

This addon assumes the /internal_data folder exists within the webroot, and you do not have a 'deny all;' statement but instead use 'internal;' to secure the internal_data folder.

For example, XenForo is accessible from: /forum rather than then the webroot.

The following must be added to config.php:


Code:

$config['internalDataUrl'] = '/forum/internal_data';


Something similar to the nginx config may be required in your webserver:


Code:

location ^~ /forum/internal_data {
internal;
add_header Etag $upstream_http_etag;
add_header X-Frame-Options SAMEORIGIN;
add_header X-Content-Type-Options nosniff;
alias /path/to/internal_data;
}


To ensure you match how XenForo serves files, add the following headers into your website config for the internal_data folder:


Code:

add_header Etag $upstream_http_etag;
add_header X-Frame-Options SAMEORIGIN;
add_header X-Content-Type-Options nosniff;


New Permissions

Permits per-forum or conversation attachment size and count limits.

Respects the global forum wide attachment size/count limits, with per-usergroup settings allowing smaller values.

Due to how XF integer permissions work, 'unlimited' or '0' evaluate as no permission being set.

Post Install Instructions
Add 'svg' file extension to the list of supported to allow svg files to be uploaded.