github freescout-helpdesk/freescout 1.5.0

This release secures FreeScout attachments (#308). After installing this update make sure that /storage/app/public/attachment folder has been moved to /storage/app/attachment and if not - move it manually.

If you are using Nginx make sure to replace

    location ~* \.(?:jpg|jpeg|gif|png|ico|cur|gz|svg|svgz|mp4|ogg|ogv|webm|htc|svg|woff|woff2|ttf)$ {
        expires 1M;
	access_log off;
	add_header Cache-Control "public";
    }
    location ~* \.(?:css|js)$ {
	expires 2d;
	access_log off;
	add_header Cache-Control "public, must-revalidate";
    }

with

    location ~* ^/storage/attachment/ {
        expires 1M;
        access_log off;
        try_files $uri $uri/ /index.php?$query_string;
    }
    location ~* ^/(?:css|js)/.*\.(?:css|js)$ {
        expires 2d;
        access_log off;
        add_header Cache-Control "public, must-revalidate";
    }
    location ~* ^/(?:css|fonts|img|installer|js|modules|[^\\\]+\..*)$ {
        expires 1M;
        access_log off;
        add_header Cache-Control "public";
    }

Now by default attachments are downloaded via PHP. If you still have any problems, please write here: https://github.com/freescout-helpdesk/freescout/issues/522

Next steps are not required, you can implement them only if you want to improve performance.

To enable downloading attachments via Apache's mod_xsendfile, enable it in the Apache and set APP_DOWNLOAD_ATTACHMENTS_VIA=apache in the .env file.

To enable downloading attachments via Nginx, set APP_DOWNLOAD_ATTACHMENTS_VIA=nginx in the .env file and add the following to the .conf file after location ~ \.php$ location:

location ^~ /storage/app/attachment/ {
    internal;
    alias /var/www/html/storage/app/attachment/;
}

Added

  • Secure attachments (#308)
  • Check max PHP version in the installer.

Fixed

  • Fixed relative date for Dutch translation.
latest releases: 1.6.13, 1.6.12, 1.6.11...
10 months ago