freescout-helpdesk/freescout 1.5.0

on GitHub

This release secures FreeScout attachments (#308). After installing this update make sure that /storage/app/public/attachment folder has been moved to /storage/app/attachment and if not - move it manually.

If you are using Nginx make sure to replace

    location ~* \.(?:jpg|jpeg|gif|png|ico|cur|gz|svg|svgz|mp4|ogg|ogv|webm|htc|svg|woff|woff2|ttf)$ {
        expires 1M;
	access_log off;
	add_header Cache-Control "public";
    }
    location ~* \.(?:css|js)$ {
	expires 2d;
	access_log off;
	add_header Cache-Control "public, must-revalidate";
    }

with

    location ~* ^/storage/attachment/ {
        expires 1M;
        access_log off;
        try_files $uri $uri/ /index.php?$query_string;
    }
    location ~* ^/(?:css|js)/.*\.(?:css|js)$ {
        expires 2d;
        access_log off;
        add_header Cache-Control "public, must-revalidate";
    }
    location ~* ^/(?:css|fonts|img|installer|js|modules|[^\\\]+\..*)$ {
        expires 1M;
        access_log off;
        add_header Cache-Control "public";
    }

Now by default attachments are downloaded via PHP. If you still have any problems, please write here: #522

Next steps are not required, you can implement them only if you want to improve performance.

To enable downloading attachments via Apache's mod_xsendfile, enable it in the Apache and set APP_DOWNLOAD_ATTACHMENTS_VIA=apache in the .env file.

To enable downloading attachments via Nginx, set APP_DOWNLOAD_ATTACHMENTS_VIA=nginx in the .env file and add the following to the .conf file after location ~ \.php$ location:

location ^~ /storage/app/attachment/ {
    internal;
    alias /var/www/html/storage/app/attachment/;
}

Added

• Secure attachments (#308)
• Check max PHP version in the installer.

Fixed

• Fixed relative date for Dutch translation.