Question on disable_symlinks #67
Description
Hi,
We would like to use the nginx-dav-ext-module with the nginx server (1.21) on a linux machine.
For security reasons, we would like to forbid to follow symbol links (e.g. for the case of accidental symbol links to directories like root / ).
The nginx directive “disable_symlinks“ looked promising, (although not yet working completely in the ngx-dav-module).
The disable_symlinks directive seems not to be used yet in the nginx-dav-ext-module.
- Are there other settings to improve the handling of symbol links?
- Or could the support of the disable_symlinks be added in nginx-dav-ext (probably by ourselves, if it was not done already by someone else) ?
Thanks for any hints!
Eckart