Jay Kuri
Jay Kuri
I submitted a pull request that provides this behavior via a new option called `followsymlinks` which defaults to true. If it's set to false, it will cause paths that contain...
Hi Greg, I'm not sure what you mean. I see that it is theoretically possible to serve a file that we should disallow, if a request has determined that there...
I've updated the patch to pass flags O_NOFOLLOW and O_RDONLY when followsymlinks is false. I also changed it so that if you choose 'followsymlinks=false' then it will resolve the root...
For Whatever it's worth, I spent quite a while battling this problem and finally came up with a working solution based on @acunniffe's code. My slightly modified version is below....
agreed. this is the best plan yet!