Issue: Wiki assets do nto use CDN

Issue Tools
- View Changes

July 27, 2017 12:52 PM

Alfa1

Distinguished Member

Wiki assets do nto use CDN

I am encountering this url:
/wiki-asset/?pid=231&x=180

I dont have this folder on my server. It does return wiki attachmants.
But it doesnt use CDN, while the CDN is set.

Issue Details

Issue Number 5186

Issue Type Bug

Project VaultWiki 4.x Series

Category Performance

Status Working as Designed

Priority 3 - Loss of Functionality

Affected Version 4.0.18

Fixed Version (none)

Milestone (none)

Software DependencyXenForo 1.x

License TypePaid

Users able to reproduce bug 0

Users unable to reproduce bug 0

Attachments 0

Assigned Users (none)

Tags (none)

July 28, 2017 12:38 PM

pegasus

VaultWiki Team

Access to wiki assets varies by user permission. They cannot be cached on a public CDN or permissions can easily be violated.

Additionally, Wiki CDN URL clearly states it only applies to Javascript and CSS assets.

Reply
July 28, 2017 1:27 PM

Alfa1

Distinguished Member

Please check the very popular addons bd attachment store and [Tinhte] Image Attachment Optimization & CDN Support.
Both addons provide CDN support for permission based Xenforo attachments and XenForo media assets.

Please consider to add similar support to the CDN functionality of Vaultwiki so that we can save the bandwidth costs of Vaultwiki full images.

Reply
July 28, 2017 1:59 PM

pegasus

VaultWiki Team

From the [bd] attachment store thread:

No, downloads do not go through PHP. If user get the URL, no more permission check.

So private attachments (such as posted in a subscribers-only forum) are accessible to guests.

From the [Tinthe] Image Attachment description:

Force image attachments work with Guest permission (Guests can view full image attachments without login logged in permission).

Looked at the source code and confirmed that all permissions are bypassed.

For VaultWiki, it may be reasonable to allow CDN support for assets that are already guest-visible, but with private assets there is always a security hole.

Reply
July 28, 2017 2:21 PM

Alfa1

Distinguished Member

The main issue is bandwidth use of full images. It would be good if there were a way to use CDN for this.
It is true that the file can be accessed if the user has the url. However, for costly files like full images this is an easy sacrifice to make.
In XF2 similar functionality for CDN is included in the core.

Reply
July 28, 2017 8:17 PM

Alfa1

Distinguished Member

I just moved from tinhte to bd attachment store. The latter has permissions working with CDN.

Reply

+ Reply

All times are GMT -4. The time now is 3:38 PM.

This site uses cookies to help personalize content, to tailor your experience, and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.

Learn more… Accept Remind me later

Welcome to VaultWiki.org, home of the wiki add-on for vBulletin and XenForo!

Issue: Wiki assets do nto use CDN

Issue Tools