Configure Media Library and Storage
masterActiveCanvas uses Active Storage. For stable media references, it uses data-ac-media-id attributes so that ContentRenderer can resolve fresh URLs (including signed URLs) at render time.
Public Uploads:
To use public URLs, set config.public_uploads = true in the initializer AND ensure your Active Storage service is declared public: true in config/storage.yml.
SVG Security:
SVG uploads are disabled by default. If enabled via config.allow_svg_uploads = true, ActiveCanvas serves them with Content-Disposition: attachment on signed-URL paths to prevent XSS. Warning: This protection is bypassed if public_uploads is true. If using public uploads, serve media from a separate origin/bucket.