tracker issue : CF-4015253

select a category, or use search below
(searches all categories and all time range)

Build-in X-SendFile Support

| View in Tracker

Status/Resolution/Reason: Needs Review//

Reporter/Name(from Bugbase): James Moberg / James Moberg (James Moberg)

Created: 07/01/2015

Components: General Server

Versions: 11.0

Failure Type: Enhancement Request

Found In Build/Fixed In Build: CF11_Final /

Priority/Frequency: Trivial / Unknown

Locale/System: English / Win 2008 Server R2 64 bit

Vote Count: 2

CFContent is the current, recommended way to secure content when providing a download, but it's costly and requires a CFThread during the download process. It would be an easy task to consume all CFThreads by downloading multiple files and throttling bandwidth.

Mod_XSendFile appears to be the solution as it hands off the downloading process to the web server. It also has the ability to enable downloading files that are not in the web root.

Could this feature be added as a new tag/feature or built in as an option when using the "File" parameter with CFContent?

----------------------------- Additional Watson Details -----------------------------

Watson Bug ID:	4015253

External Customer Info:
External Company:  
External Customer Name: James
External Customer Email:  
External Test Config: My Hardware and Environment details:


  1. November 11, 2015 00:00:00: 1_b.gif
  2. November 11, 2015 00:00:00: 2_t.txt
  3. November 11, 2015 00:00:00: 3_dilo.jpg
  4. November 11, 2015 00:00:00: 4_dilo.jpg


X-SendFile was mentioned in a 9x bug report (neverfix; jrun_iis6_wildcard.dll was incompatible). This would be the best feature to add for providing secure downloads of large binaries.
Comment by External U.
6788 | July 01, 2015 12:10:10 PM GMT
This would be an awesome feature. CFCONTENT doesn't cut it.
Vote by External U.
6789 | July 02, 2015 01:19:31 PM GMT
It's been 4 years. Has this been reviewed? As a result of RAM + CFContent short-comings, we've had to duplicate files w/random names (and clean up files using a schedule) and/or upload files to Amazon S3 in the background to a bucket configured to delete files after 24 hours and provide a time-expiring link. It would be more efficient if this function were added to ColdFusion/IIS.
Comment by James M.
30631 | April 15, 2019 06:03:13 PM GMT